[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark CVE-2018-4868 as unimportant

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c9bcc9d0 by Salvatore Bonaccorso at 2018-01-07T21:43:34+01:00
Mark CVE-2018-4868 as unimportant

Specially crafted images processed can cause ouf of memory and exiv2
crash and having negligible impact. Cf.

https://github.com/Exiv2/exiv2/issues/202#issuecomment-355750183

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -813,7 +813,7 @@ CVE-2018-4870
 CVE-2018-4869
 	RESERVED
 CVE-2018-4868 (The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 ...)
-	- exiv2 <unfixed>
+	- exiv2 <unfixed> (unimportant)
 	NOTE: https://github.com/Exiv2/exiv2/issues/202
 CVE-2017-1000500 (Keycloak SSO versions prior to 2.x are vulnerable to Host Header ...)
 	NOT-FOR-US: Keycloak



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c9bcc9d0f843b242d677db70264dd3148eabda36

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c9bcc9d0f843b242d677db70264dd3148eabda36
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180107/779e2ed1/attachment.html>