[Git][security-tracker-team/security-tracker][master] Add CVE-2019-13508/freetds

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a7f0e04d by Salvatore Bonaccorso at 2019-11-02T16:22:59Z
Add CVE-2019-13508/freetds

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16407,7 +16407,11 @@ CVE-2019-13509 (In Docker CE and EE before 18.09.8 (as well as Docker EE before
 	{DSA-4521-1}
 	- docker.io 18.09.1+dfsg1-8 (bug #932673)
 CVE-2019-13508 (FreeTDS through 1.1.11 has a Buffer Overflow. ...)
-	TODO: check
+	- freetds <unfixed>
+	NOTE: https://github.com/FreeTDS/freetds/commit/0df4eb82a0e3ff844e373d7c9f9c6c813925e2ac
+	NOTE: https://bugs.launchpad.net/bugs/1835896
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1736255
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=1141132
 CVE-2019-13507 (hidea.com AZ Admin 1.0 has news_det.php?cod= SQL Injection. ...)
 	NOT-FOR-US: hidea.com AZ Admin
 CVE-2019-13506 (@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandle ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a7f0e04d1ff852bfddae2c86e3af98790eb588a1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a7f0e04d1ff852bfddae2c86e3af98790eb588a1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191102/fbf1fcb4/attachment.html>