[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-1000450/opencv

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4cd1b3e7 by Salvatore Bonaccorso at 2018-01-03T06:47:44+01:00
Add CVE-2017-1000450/opencv

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -17,7 +17,9 @@ CVE-2017-1000452 (An XML Signature Wrapping vulnerability exists in Samlify 2.2.
 CVE-2017-1000451 (fs-git is a file system like api for git repository. The fs-git ...)
 	TODO: check
 CVE-2017-1000450 (In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and ...)
-	TODO: check
+	- opencv <unfixed>
+	NOTE: https://github.com/opencv/opencv/issues/9723
+	NOTE: https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColor
 CVE-2017-1000449 (BitThunder 0.9.2 stable is vulnerable to a buffer overflow in ...)
 	TODO: check
 CVE-2017-1000448 (Structured Data Linter versions 2.4.1 and older are vulnerable to a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4cd1b3e7ec05216fe585ae665e4ab876b9c8ebd2

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4cd1b3e7ec05216fe585ae665e4ab876b9c8ebd2
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180103/86c24a7c/attachment.html>