[Git][security-tracker-team/security-tracker][master] Update information for CVE-2019-9834/netdata

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
803f9111 by Salvatore Bonaccorso at 2019-07-14T20:08:16Z
Update information for CVE-2019-9834/netdata

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10311,7 +10311,11 @@ CVE-2019-9836 (Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (
 CVE-2019-9835 (The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set L ...)
 	NOT-FOR-US: Fujitsu Wireless Keyboard Set LX901 GK900 devices
 CVE-2019-9834 (** DISPUTED ** The Netdata web application through 1.13.0 allows remot ...)
-	- netdata <undetermined>
+	- netdata <unfixed> (unimportant)
+	NOTE: https://github.com/netdata/netdata/issues/5800#issuecomment-510986112
+	NOTE: Risk disupted by upstream because there is a clear warning next to the
+	NOTE: button for importing a snapshot, thus treat the issue as unimportant with
+	NOTE: negligible impact.
 CVE-2019-9833 (The Screen Stream application through 3.0.15 for Android allows remote ...)
 	NOT-FOR-US: Screen Stream application for Android
 CVE-2019-9832 (The AirDrop application through 2.0 for Android allows remote attacker ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/803f91114f02e02b6dfca83d1ad9ec5a642a035f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/803f91114f02e02b6dfca83d1ad9ec5a642a035f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190714/177871df/attachment.html>