[Git][security-tracker-team/security-tracker][master] Add CVE-2018-17191/netbeans

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
20cdac76 by Salvatore Bonaccorso at 2018-12-30T16:32:05Z
Add CVE-2018-17191/netbeans

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15473,8 +15473,11 @@ CVE-2018-17193 (The message-page.jsp error page used the value of the HTTP reque
 	NOT-FOR-US: Apache NiFi
 CVE-2018-17192 (The X-Frame-Options headers were applied inconsistently on some HTTP ...)
 	NOT-FOR-US: Apache NiFi
-CVE-2018-17191
+CVE-2018-17191 [Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote command execution (RCE)]
 	RESERVED
+	- netbeans <unfixed>
+	NOTE: Fixed upstream in version 10.0
+	NOTE: https://www.openwall.com/lists/oss-security/2018/12/30/1
 CVE-2018-17190 (In all versions of Apache Spark, its standalone resource manager ...)
 	NOT-FOR-US: Apache Spark
 CVE-2018-17189



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/20cdac768238d4c9dbf13d09394a65c403201390

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/20cdac768238d4c9dbf13d09394a65c403201390
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181230/f46887fe/attachment.html>