[Git][security-tracker-team/security-tracker][master] Add CVE-2019-5061/wpa

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a890fdb4 by Salvatore Bonaccorso at 2020-02-13T22:09:43+01:00
Add CVE-2019-5061/wpa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -63176,7 +63176,10 @@ CVE-2019-5063 (An exploitable heap buffer overflow vulnerability exists in the d
 CVE-2019-5062 (An exploitable denial-of-service vulnerability exists in the 802.11w s ...)
 	TODO: check
 CVE-2019-5061 (An exploitable denial-of-service vulnerability exists in the hostapd 2 ...)
-	TODO: check
+	- wpa <unfixed>
+	NOTE: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0849
+	NOTE: https://w1.fi/cgit/hostap/commit/?id=018edec9b2bd3db20605117c32ff79c1e625c432
+	NOTE: removes IAPP functionality from hostapd.
 CVE-2019-5060 (An exploitable code execution vulnerability exists in the XPM image re ...)
 	- libsdl2-image 2.0.5+dfsg1-1
 	[buster] - libsdl2-image <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a890fdb4c2316418cffe7ab386469422b87c1797

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a890fdb4c2316418cffe7ab386469422b87c1797
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200213/608d5690/attachment.html>