[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-17669/exiv2, checked and issue present in 0.24-1

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
91e22def by Salvatore Bonaccorso at 2018-01-01T14:59:07+01:00
Add CVE-2017-17669/exiv2, checked and issue present in 0.24-1

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -5924,9 +5924,8 @@ CVE-2017-17670 (In VideoLAN VLC media player through 2.2.8, there is a type conv
 	NOTE: http://www.openwall.com/lists/oss-security/2017/12/15/1
 	NOTE: POC: https://gist.github.com/dyntopia/194d912287656f66dd502158b0cd2e68
 CVE-2017-17669 (There is a heap-based buffer over-read in the ...)
-	- exiv2 <undetermined>
+	- exiv2 <unfixed>
 	NOTE: https://github.com/Exiv2/exiv2/issues/187
-	TODO: check
 CVE-2017-17668
 	RESERVED
 CVE-2017-17667



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/91e22defc4153f0ac9d91169ab2a4ac37fa283a5

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/91e22defc4153f0ac9d91169ab2a4ac37fa283a5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180101/885e1b36/attachment.html>