[Git][security-tracker-team/security-tracker][master] Add two new znc issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8312a024 by Salvatore Bonaccorso at 2018-07-14T22:03:53+02:00
Add two new znc issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,10 @@
+CVE-2018-XXXX [privilege escalation to admin permissions / allows injection of rogue values in znc.conf]
+	- znc <unfixed>
+	NOTE: https://github.com/znc/znc/commit/a7bfbd93812950b7444841431e8e297e62cb524e
+	NOTE: https://github.com/znc/znc/commit/d22fef8620cdd87490754f607e7153979731c69d
+CVE-2018-XXXX [path traversal flaw]
+	- znc <unfixed>
+	NOTE: https://github.com/znc/znc/commit/a4a5aeeb17d32937d8c7d743dae9a4cc755ce773
 CVE-2018-14053
 	RESERVED
 CVE-2018-14052 (An issue has been found in libwav through 2017-04-20. It is a SEGV in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8312a024c5bb7b3bf5dbacc621c794dcc1e1a7a5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8312a024c5bb7b3bf5dbacc621c794dcc1e1a7a5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180714/f05aae06/attachment.html>