[Git][security-tracker-team/security-tracker][master] automatic update

Thu May 17 09:10:22 BST 2018

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
115a2060 by security tracker role at 2018-05-17T08:10:16+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================

--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,31 @@
+CVE-2018-11229
+	RESERVED
+CVE-2018-11228
+	RESERVED
+CVE-2018-11227
+	RESERVED
+CVE-2018-11226 (The getString function in decompile.c in libming through 0.4.8 ...)
+	TODO: check
+CVE-2018-11225 (The dcputs function in decompile.c in libming through 0.4.8 mishandles ...)
+	TODO: check
+CVE-2018-11224 (An issue was discovered in Libav 12.3. A read access violation in the ...)
+	TODO: check
+CVE-2018-11223
+	RESERVED
+CVE-2018-11222
+	RESERVED
+CVE-2018-11221
+	RESERVED
+CVE-2018-11220
+	RESERVED
+CVE-2018-11219
+	RESERVED
+CVE-2018-11218
+	RESERVED
+CVE-2018-11217
+	RESERVED
+CVE-2018-11216
+	RESERVED
 CVE-2018-11215
 	RESERVED
 CVE-2018-11214 (An issue was discovered in libjpeg 9a. The get_text_rgb_row function in ...)
@@ -27190,8 +27218,7 @@ CVE-2018-1174
 	RESERVED
 CVE-2018-1173
 	RESERVED
-CVE-2018-1172
-	RESERVED
+CVE-2018-1172 (This vulnerability allows remote attackers to deny service on ...)
 	[experimental] - squid 4.0.21-1~exp5 (unimportant)
 	- squid <removed> (unimportant)
 	[wheezy] - squid <not-affected> (Vunerable code introduced in 3.1)
@@ -30220,18 +30247,18 @@ CVE-2018-0330
 	RESERVED
 CVE-2018-0329
 	RESERVED
-CVE-2018-0328
-	RESERVED
-CVE-2018-0327
-	RESERVED
-CVE-2018-0326
-	RESERVED
-CVE-2018-0325
-	RESERVED
-CVE-2018-0324
-	RESERVED
-CVE-2018-0323
-	RESERVED
+CVE-2018-0328 (A vulnerability in the web framework of Cisco Unified Communications ...)
+	TODO: check
+CVE-2018-0327 (A vulnerability in the web framework of Cisco Identity Services Engine ...)
+	TODO: check
+CVE-2018-0326 (A vulnerability in the web UI of Cisco TelePresence Server Software ...)
+	TODO: check
+CVE-2018-0325 (A vulnerability in the Session Initiation Protocol (SIP) call-handling ...)
+	TODO: check
+CVE-2018-0324 (A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure ...)
+	TODO: check
+CVE-2018-0323 (A vulnerability in the web management interface of Cisco Enterprise NFV ...)
+	TODO: check
 CVE-2018-0322
 	RESERVED
 CVE-2018-0321
@@ -30282,8 +30309,8 @@ CVE-2018-0299
 	RESERVED
 CVE-2018-0298
 	RESERVED
-CVE-2018-0297
-	RESERVED
+CVE-2018-0297 (A vulnerability in the detection engine of Cisco Firepower Threat ...)
+	TODO: check
 CVE-2018-0296
 	RESERVED
 CVE-2018-0295
@@ -30296,10 +30323,10 @@ CVE-2018-0292
 	RESERVED
 CVE-2018-0291
 	RESERVED
-CVE-2018-0290
-	RESERVED
-CVE-2018-0289
-	RESERVED
+CVE-2018-0290 (A vulnerability in the TCP stack of Cisco SocialMiner could allow an ...)
+	TODO: check
+CVE-2018-0289 (A vulnerability in the logs component of Cisco Identity Services Engine ...)
+	TODO: check
 CVE-2018-0288 (A vulnerability in Cisco WebEx Recording Format (WRF) Player could ...)
 	NOT-FOR-US: Cisco
 CVE-2018-0287 (A vulnerability in the Cisco WebEx Network Recording Player for ...)
@@ -30316,14 +30343,14 @@ CVE-2018-0282
 	RESERVED
 CVE-2018-0281 (A vulnerability in the detection engine of Cisco Firepower System ...)
 	NOT-FOR-US: Cisco
-CVE-2018-0280
-	RESERVED
-CVE-2018-0279
-	RESERVED
+CVE-2018-0280 (A vulnerability in the Real-Time Transport Protocol (RTP) bitstream ...)
+	TODO: check
+CVE-2018-0279 (A vulnerability in the Secure Copy Protocol (SCP) server of Cisco ...)
+	TODO: check
 CVE-2018-0278 (A vulnerability in the management console of Cisco Firepower System ...)
 	NOT-FOR-US: Cisco
-CVE-2018-0277
-	RESERVED
+CVE-2018-0277 (A vulnerability in the Extensible Authentication Protocol-Transport ...)
+	TODO: check
 CVE-2018-0276 (A vulnerability in Cisco WebEx Connect IM could allow an ...)
 	NOT-FOR-US: Cisco
 CVE-2018-0275 (A vulnerability in the support tunnel feature of Cisco Identity ...)
@@ -30334,14 +30361,14 @@ CVE-2018-0273 (A vulnerability in the IPsec Manager of Cisco StarOS for Cisco ..
 	NOT-FOR-US: Cisco
 CVE-2018-0272 (A vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco ...)
 	NOT-FOR-US: Cisco
-CVE-2018-0271
-	RESERVED
-CVE-2018-0270
-	RESERVED
+CVE-2018-0271 (A vulnerability in the API gateway of the Cisco Digital Network ...)
+	TODO: check
+CVE-2018-0270 (A vulnerability in the web-based management interface of Cisco IoT ...)
+	TODO: check
 CVE-2018-0269 (A vulnerability in the web framework of the Cisco Digital Network ...)
 	NOT-FOR-US: Cisco
-CVE-2018-0268
-	RESERVED
+CVE-2018-0268 (A vulnerability in the container management subsystem of Cisco Digital ...)
+	TODO: check
 CVE-2018-0267 (A vulnerability in the web framework of Cisco Unified Communications ...)
 	NOT-FOR-US: Cisco
 CVE-2018-0266 (A vulnerability in the web framework of Cisco Unified Communications ...)
@@ -30432,8 +30459,8 @@ CVE-2018-0224 (A vulnerability in the CLI of the Cisco StarOS operating system f
 	NOT-FOR-US: Cisco
 CVE-2018-0223 (A vulnerability in DesktopServlet in the web-based management interface ...)
 	NOT-FOR-US: Cisco
-CVE-2018-0222
-	RESERVED
+CVE-2018-0222 (A vulnerability in Cisco Digital Network Architecture (DNA) Center ...)
+	TODO: check
 CVE-2018-0221 (A vulnerability in specific CLI commands for the Cisco Identity ...)
 	NOT-FOR-US: Cisco
 CVE-2018-0220 (A vulnerability in the web-based management interface of Cisco ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/115a2060d7be8e85feacdbe3abcf52f543a36a5f

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/115a2060d7be8e85feacdbe3abcf52f543a36a5f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180517/283d479d/attachment.html>
