[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3657/isync

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a9f52660 by Salvatore Bonaccorso at 2021-12-03T13:44:51+01:00
Add CVE-2021-3657/isync

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21098,8 +21098,10 @@ CVE-2021-37152 (Multiple XSS issues exist in Sonatype Nexus Repository Manager 3
 	NOT-FOR-US: Sonatype
 CVE-2021-37151 (CyberArk Identity 21.5.131, when handling an invalid authentication at ...)
 	NOT-FOR-US: CyberArk Identity
-CVE-2021-3657
+CVE-2021-3657 [multiple buffer overflows in isync/mbsync]
 	RESERVED
+	- isync <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2021/12/03/1
 CVE-2021-37159 (hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel throu ...)
 	{DLA-2785-1}
 	- linux 5.14.6-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a9f52660aa3c60a103fe8e276bae8eae68e47488

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a9f52660aa3c60a103fe8e276bae8eae68e47488
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211203/7317b92f/attachment.htm>