[Git][security-tracker-team/security-tracker][master] Add CVE-202-18897/libpff

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d5b7e482 by Salvatore Bonaccorso at 2021-08-20T10:17:37+02:00
Add CVE-202-18897/libpff

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -78317,7 +78317,10 @@ CVE-2020-18899 (An uncontrolled memory allocation in DataBufdata(subBox.length-s
 CVE-2020-18898 (A stack exhaustion issue in the printIFDStructure function of Exiv2 0. ...)
 	TODO: check
 CVE-2020-18897 (An use-after-free vulnerability in the libpff_item_tree_create_node fu ...)
-	TODO: check
+	- libpff 20180714-1
+	NOTE: https://github.com/libyal/libpff/issues/61
+	NOTE: https://github.com/libyal/libpff/issues/62
+	NOTE: https://github.com/libyal/libpff/commit/effae88adfc9def45be0bb7ff27d20ce133d8c7c
 CVE-2020-18896
 	RESERVED
 CVE-2020-18895



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5b7e48211e867bd7f33fe5b77dfd65f7989aa08

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5b7e48211e867bd7f33fe5b77dfd65f7989aa08
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210820/22147c6e/attachment.htm>