[Git][security-tracker-team/security-tracker][master] Add CVE-2021-2217{3,4}/wireshark

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c8e156eb by Salvatore Bonaccorso at 2021-02-01T07:42:33+01:00
Add CVE-2021-2217{3,4}/wireshark

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9491,10 +9491,18 @@ CVE-2021-22176
 	RESERVED
 CVE-2021-22175
 	RESERVED
-CVE-2021-22174
-	RESERVED
-CVE-2021-22173
-	RESERVED
+CVE-2021-22174 [USB HID dissector could crash]
+	RESERVED
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2021-02.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/17165
+	TODO: check if only affects 3.4.x series
+CVE-2021-22173 [USB HID dissector memory leak]
+	RESERVED
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2021-01.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/17124
+	TODO: check if only affects 3.4.x series
 CVE-2021-22172
 	RESERVED
 CVE-2021-22171 (Insufficient validation of authentication parameters in GitLab Pages f ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8e156ebbf6ffd7fe5064fa71ceb1eacef05d3c3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8e156ebbf6ffd7fe5064fa71ceb1eacef05d3c3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210201/e01f2461/attachment-0001.html>