[Git][security-tracker-team/security-tracker][master] Add CVE-2020-35776/asterisk

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dda520d6 by Salvatore Bonaccorso at 2021-02-20T07:35:14+01:00
Add CVE-2020-35776/asterisk

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14365,7 +14365,9 @@ CVE-2020-35778 (Certain NETGEAR devices are affected by CSRF. This affects GS716
 CVE-2020-35777 (NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command inj ...)
 	NOT-FOR-US: Netgear
 CVE-2020-35776 (A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk version ...)
-	TODO: check
+	- asterisk <unfixed>
+	NOTE: https://downloads.asterisk.org/pub/security/AST-2021-001.html
+	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-29227
 CVE-2020-35775 (CITSmart before 9.1.2.23 allows LDAP Injection. ...)
 	NOT-FOR-US: CITSmart
 CVE-2020-35774 (server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dda520d6037767a04d55e0f4d760afe770c2831f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dda520d6037767a04d55e0f4d760afe770c2831f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210220/71723596/attachment.html>