[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add new quagga issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
58ab2ef4 by Salvatore Bonaccorso at 2018-02-15T22:52:19+01:00
Add new quagga issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -4692,14 +4692,24 @@ CVE-2018-5383
 	RESERVED
 CVE-2018-5382
 	RESERVED
-CVE-2018-5381
+CVE-2018-5381 [fix infinite loop on certain invalid OPEN messages]
 	RESERVED
-CVE-2018-5380
+	- quagga <unfixed>
+	NOTE: https://www.quagga.net/security/Quagga-2018-1975.txt
+CVE-2018-5380 [debug print of received NOTIFY data can over-read msg array]
 	RESERVED
-CVE-2018-5379
+	- quagga <unfixed>
+	NOTE: https://www.quagga.net/security/Quagga-2018-1550.txt
+CVE-2018-5379 [Fix double free of unknown attribute]
 	RESERVED
-CVE-2018-5378
+	- quagga <unfixed>
+	NOTE: https://www.quagga.net/security/Quagga-2018-1114.txt
+CVE-2018-5378 [invalid attr length sends NOTIFY with data overrun]
 	RESERVED
+	- quagga <unfixed>
+	[jessie] - quagga <not-affected> (Vulnerable code not present)
+	[wheezy] - quagga <not-affected> (Vulnerable code not present)
+	NOTE: https://www.quagga.net/security/Quagga-2018-0543.txt
 CVE-2018-5377 (Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access ...)
 	NOT-FOR-US: Discuz! DiscuzX
 CVE-2018-5376 (Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/58ab2ef4c04cbf3e9ce5f6d9fcd5c48713ce6c0a

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/58ab2ef4c04cbf3e9ce5f6d9fcd5c48713ce6c0a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180215/22ecfdb3/attachment.html>