[Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-10900/wireshark

Salvatore Bonaccorso carnil at debian.org
Tue Apr 9 16:01:29 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bab1e728 by Salvatore Bonaccorso at 2019-04-09T15:00:32Z
Update information on CVE-2019-10900/wireshark

File dissector for ruby marschal objects introduced in 3.0.0 upstream.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -289,9 +289,7 @@ CVE-2019-10901 (In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDS
 	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-17.html
 CVE-2019-10900 (In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop.  ...)
-	- wireshark <undetermined>
-	[stretch] - wireshark <not-affected> (vulnerable code is not present)
-	[jessie] - wireshark <not-affected> (vulnerable code is not present)
+	- wireshark <not-affected> (Vulnerable code introduced later in 3.0.0)
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612
 	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=26eee01f57f0a86fb375892c7937eac24ede4610
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-13.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bab1e72877c70463f211fb8c7fe11e4340d9c95f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bab1e72877c70463f211fb8c7fe11e4340d9c95f
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190409/94db88dc/attachment.html>


More information about the debian-security-tracker-commits mailing list