[Git][security-tracker-team/security-tracker][master] Add some ancient linux CVEs

Salvatore Bonaccorso carnil at debian.org
Sun Jul 28 07:21:18 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7f083ae8 by Salvatore Bonaccorso at 2019-07-28T06:18:20Z
Add some ancient linux CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,27 @@
+CVE-2017-18379 [nvmet-fc: ensure target queue id within range]
+	- linux 4.14.2-1
+	NOTE: https://git.kernel.org/linus/0c319d3a144d4b8f1ea2047fd614d2149b68f889
+CVE-2016-10764 [mtd: spi-nor: Off by one in cqspi_setup_flash()]
+	- linux 4.9.6-1
+	NOTE: https://git.kernel.org/linus/193e87143c290ec16838f5368adc0e0bc94eb931
+CVE-2015-9289 [[media] cx24116: fix a buffer overflow when checking userspace params]
+	- linux 4.1.5-1
+	NOTE: https://git.kernel.org/linus/1fa2337a315a2448c5434f41e00d56b01a22283c
+CVE-2012-6712 [iwlwifi: Sanity check for sta_id]
+	- linux 3.8.11-1
+	NOTE: https://git.kernel.org/linus/2da424b0773cea3db47e1e81db71eeebde8269d4
+CVE-2011-5327 [loopback: off by one in tcm_loop_make_naa_tpg()]
+	- linux <not-affected> (Fixed before src:linux-2.6 -> src:linux rename)
+	NOTE: https://git.kernel.org/linus/12f09ccb4612734a53e47ed5302e0479c10a50f8
+CVE-2010-5332 [mlx4_en: Fix out of bounds array access]
+	- linux <not-affected> (Fixed before src:linux-2.6 -> src:linux rename)
+	NOTE: https://git.kernel.org/linus/0926f91083f34d047abc74f1ca4fa6a9c161f7db
+CVE-2010-5331 [drivers/gpu/drm/radeon/radeon_atombios.c: range check issues]
+	- linux <not-affected> (Fixed before src:linux-2.6 -> src:linux rename)
+	NOTE: https://git.kernel.org/linus/0031c41be5c529f8329e327b63cde92ba1284842
+CVE-2007-6762 [NetLabel: correct CIPSO tag handling when adding new DOI definitions]
+	- linux <not-affected> (Fixed before src:linux-2.6 -> src:linux rename)
+	NOTE: https://git.kernel.org/linus/2a2f11c227bdf292b3a2900ad04139d301b56ac4
 CVE-2019-14296 (canUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause ...)
 	- upx-ucl <unfixed> (unimportant; bug #933232)
 	NOTE: https://github.com/upx/upx/issues/287



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7f083ae82e92291ce1d13a15c13ea3f3259bcb42

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7f083ae82e92291ce1d13a15c13ea3f3259bcb42
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190728/8819b901/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list