[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Update CVE-2017-17461 entry

Salvatore Bonaccorso carnil at debian.org
Mon Feb 5 17:00:35 UTC 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
370af5f6 by Salvatore Bonaccorso at 2018-02-05T17:59:28+01:00
Update CVE-2017-17461 entry

Furhter investigation had shown that the CVE is invalid and has been
withdrawn. MITRE updates CVE entry accordingly.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -13660,10 +13660,8 @@ CVE-2017-17463 (Vivo modems allow remote attackers to obtain sensitive informati
 	NOT-FOR-US: Vivo modems
 CVE-2017-17462
 	RESERVED
-CVE-2017-17461 (A Regular expression Denial of Service (ReDoS) vulnerability in the ...)
-	- node-marked <unfixed> (unimportant)
-	NOTE: https://www.checkmarx.com/advisories/regular-expression-denial-service-redos-vulnerability-marked-npm-package/
-	NOTE: nodejs not covered by security support
+CVE-2017-17461
+	REJECTED
 CVE-2017-17460
 	RESERVED
 CVE-2018-1340



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/370af5f6f088628bf1e755d1aa4431e442cd98c5

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/370af5f6f088628bf1e755d1aa4431e442cd98c5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180205/43526ca8/attachment.html>


More information about the Secure-testing-commits mailing list