[Git][security-tracker-team/security-tracker][master] Add CVE-2020-7238/netty

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
183537eb by Salvatore Bonaccorso at 2020-01-30T08:13:05+01:00
Add CVE-2020-7238/netty

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2582,7 +2582,10 @@ CVE-2019-20383
 CVE-2019-20382
 	RESERVED
 CVE-2020-7238 (Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1796225
+	NOTE: https://github.com/jdordonezn/CVE-2020-72381/issues/1
+	NOTE: Issue exists because of incomplete fix for CVE-2019-16869.
 CVE-2020-7237 (Cacti 1.2.8 allows Remote Code Execution (by privileged users) via she ...)
 	- cacti <unfixed> (bug #949997)
 	[jessie] - cacti <not-affected> (Vulnerable code introduced later)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/183537ebd736151ded43af86bff9137b62571c1b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/183537ebd736151ded43af86bff9137b62571c1b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200130/bbd921f1/attachment.html>