[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-6389/wordpress

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
21b249ec by Salvatore Bonaccorso at 2018-02-06T22:25:06+01:00
Add CVE-2018-6389/wordpress

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1082,7 +1082,10 @@ CVE-2018-6391 (A cross-site request forgery web vulnerability has been discovere
 CVE-2018-6390 (The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 ...)
 	NOT-FOR-US: Kingsoft WPS Office
 CVE-2018-6389 (In WordPress through 4.9.2, unauthenticated attackers can cause a ...)
-	TODO: check
+	- wordpress <unfixed>
+	NOTE: https://baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html
+	NOTE: https://thehackernews.com/2018/02/wordpress-dos-exploit.html
+	NOTE: https://wpvulndb.com/vulnerabilities/9021
 CVE-2018-6388 (iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote ...)
 	NOT-FOR-US: iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices
 CVE-2018-6387 (iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices have a hardcoded ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/21b249ecaf1b8f73d9db53949e3d3f934be0a620

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/21b249ecaf1b8f73d9db53949e3d3f934be0a620
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180206/1e917e8a/attachment.html>