[Git][security-tracker-team/security-tracker][master] Add CVE-2018-19278/asterisk (AST-2018-010)

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
415e9052 by Salvatore Bonaccorso at 2018-11-15T15:13:41Z
Add CVE-2018-19278/asterisk (AST-2018-010)

Problematic code only in the 15.x and 16.x releases.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31,7 +31,9 @@ CVE-2018-19280 (Centreon 3.4.x has XSS via the resource name or macro expression
 CVE-2018-19279 (PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the ...)
 	NOT-FOR-US: PRIMX ZoneCentral
 CVE-2018-19278 (Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x ...)
-	TODO: check
+	- asterisk <not-affected> (Vulnerable code introduced in 15.x and 16.x releases)
+	NOTE: https://downloads.asterisk.org/pub/security/AST-2018-010.html
+	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-28127
 CVE-2015-9274 (HarfBuzz before 1.0.4 allows remote attackers to cause a denial of ...)
 	- harfbuzz 1.2.6-1
 	NOTE: https://github.com/harfbuzz/harfbuzz/commit/c917965b9e6fe2b21ed6c51559673288fa3af4b7



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/415e90523b3535c7d241fe8fa943fc092da23527

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/415e90523b3535c7d241fe8fa943fc092da23527
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181115/60a4b0d0/attachment-0001.html>