[Git][security-tracker-team/security-tracker][master] Add CVE-2018-17281/asterisk

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a10868db by Salvatore Bonaccorso at 2018-09-25T05:17:33Z
Add CVE-2018-17281/asterisk

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -52,8 +52,11 @@ CVE-2018-17407 [writet1 protection against buffer overflow]
 	- texlive-bin 2018.20180907.48586-2 (bug #909317)
 	NOTE: Fixed by: https://github.com/TeX-Live/texlive-source/commit/6ed0077520e2b0da1fd060c7f88db7b2e6068e4c
 	NOTE: Introduced in: https://github.com/TeX-Live/texlive-source/commit/59cbb8f96b0543c2912d6370ce8021181661e1cf
-CVE-2018-17281
+CVE-2018-17281 [Remote crash vulnerability in HTTP websocket upgrade (AST-2018-009)]
 	RESERVED
+	- asterisk <unfixed>
+	NOTE: https://downloads.asterisk.org/pub/security/AST-2018-009.html
+	NOTE: :https://issues.asterisk.org/jira/browse/ASTERISK-28013
 CVE-2018-17280
 	RESERVED
 CVE-2018-17279



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a10868dbe61956223228c3e4ad5d1bf41ad6cf7e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a10868dbe61956223228c3e4ad5d1bf41ad6cf7e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180925/aa4fab01/attachment.html>