[Git][security-tracker-team/security-tracker][master] Process some more NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jul 14 21:40:52 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7448129b by Salvatore Bonaccorso at 2021-07-14T22:34:24+02:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2686,7 +2686,7 @@ CVE-2021-35529
 CVE-2021-35528
 	RESERVED
 CVE-2021-35527 (Password autocomplete vulnerability in the web application password fi ...)
-	TODO: check
+	NOT-FOR-US: Hitachi ABB Power Grids eSOMS
 CVE-2021-35526
 	RESERVED
 CVE-2021-3624 [buffer-overflow caused by integer-overflow in foveon_load_camf()]
@@ -2854,7 +2854,7 @@ CVE-2021-35471
 CVE-2021-35470
 	RESERVED
 CVE-2021-35469 (The Lexmark Printer Software G2, G3 and G4 Installation Packages have  ...)
-	TODO: check
+	NOT-FOR-US: Lexmark
 CVE-2021-35468
 	RESERVED
 CVE-2021-35467
@@ -4943,89 +4943,89 @@ CVE-2021-34531
 CVE-2021-34530
 	RESERVED
 CVE-2021-34529 (Visual Studio Code Remote Code Execution Vulnerability This CVE ID is  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34528 (Visual Studio Code Remote Code Execution Vulnerability This CVE ID is  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34527 (Windows Print Spooler Remote Code Execution Vulnerability ...)
 	NOT-FOR-US: Microsoft
 CVE-2021-34526
 	RESERVED
 CVE-2021-34525 (Windows DNS Server Remote Code Execution Vulnerability This CVE ID is  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34524
 	RESERVED
 CVE-2021-34523 (Microsoft Exchange Server Elevation of Privilege Vulnerability This CV ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34522 (Microsoft Defender Remote Code Execution Vulnerability This CVE ID is  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34521 (Raw Image Extension Remote Code Execution Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34520 (Microsoft SharePoint Server Remote Code Execution Vulnerability This C ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34519 (Microsoft SharePoint Server Information Disclosure Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34518 (Microsoft Excel Remote Code Execution Vulnerability This CVE ID is uni ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34517 (Microsoft SharePoint Server Spoofing Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34516 (Win32k Elevation of Privilege Vulnerability This CVE ID is unique from ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34515
 	RESERVED
 CVE-2021-34514 (Windows Kernel Elevation of Privilege Vulnerability This CVE ID is uni ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34513 (Storage Spaces Controller Elevation of Privilege Vulnerability This CV ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34512 (Storage Spaces Controller Elevation of Privilege Vulnerability This CV ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34511 (Windows Installer Elevation of Privilege Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34510 (Storage Spaces Controller Elevation of Privilege Vulnerability This CV ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34509 (Storage Spaces Controller Information Disclosure Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34508 (Windows Kernel Remote Code Execution Vulnerability This CVE ID is uniq ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34507 (Windows Remote Assistance Information Disclosure Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34506
 	RESERVED
 CVE-2021-34505
 	RESERVED
 CVE-2021-34504 (Windows Address Book Remote Code Execution Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34503 (Microsoft Windows Media Foundation Remote Code Execution Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34502
 	RESERVED
 CVE-2021-34501 (Microsoft Excel Remote Code Execution Vulnerability This CVE ID is uni ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34500 (Windows Kernel Memory Information Disclosure Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34499 (Windows DNS Server Denial of Service Vulnerability This CVE ID is uniq ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34498 (Windows GDI Elevation of Privilege Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34497 (Windows MSHTML Platform Remote Code Execution Vulnerability This CVE I ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34496 (Windows GDI Information Disclosure Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34495
 	RESERVED
 CVE-2021-34494 (Windows DNS Server Remote Code Execution Vulnerability This CVE ID is  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34493 (Windows Partition Management Driver Elevation of Privilege Vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34492 (Windows Certificate Spoofing Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34491 (Win32k Information Disclosure Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34490 (Windows TCP/IP Driver Denial of Service Vulnerability This CVE ID is u ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34489 (DirectWrite Remote Code Execution Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34488 (Windows Console Driver Elevation of Privilege Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34487
 	RESERVED
 CVE-2021-34486
@@ -5043,29 +5043,29 @@ CVE-2021-34481
 CVE-2021-34480
 	RESERVED
 CVE-2021-34479 (Microsoft Visual Studio Spoofing Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34478
 	RESERVED
 CVE-2021-34477 (Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34476 (Bowser.sys Denial of Service Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34475
 	RESERVED
 CVE-2021-34474 (Dynamics Business Central Remote Code Execution Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34473 (Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34472
 	RESERVED
 CVE-2021-34471
 	RESERVED
 CVE-2021-34470 (Microsoft Exchange Server Elevation of Privilege Vulnerability This CV ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34469 (Microsoft Office Security Feature Bypass Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34468 (Microsoft SharePoint Server Remote Code Execution Vulnerability This C ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-34467
 	RESERVED
 CVE-2021-34466
@@ -6607,25 +6607,25 @@ CVE-2021-33790 (The RebornCore library before 4.7.3 allows remote code execution
 CVE-2021-33789
 	RESERVED
 CVE-2021-33788 (Windows LSA Denial of Service Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33787
 	RESERVED
 CVE-2021-33786 (Windows LSA Security Feature Bypass Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33785 (Windows AF_UNIX Socket Provider Denial of Service Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33784 (Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33783 (Windows SMB Information Disclosure Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33782 (Windows Authenticode Spoofing Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33781 (Active Directory Security Feature Bypass Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33780 (Windows DNS Server Remote Code Execution Vulnerability This CVE ID is  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33779 (Windows ADFS Security Feature Bypass Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33778 (HEVC Video Extensions Remote Code Execution Vulnerability This CVE ID  ...)
 	TODO: check
 CVE-2021-33777 (HEVC Video Extensions Remote Code Execution Vulnerability This CVE ID  ...)
@@ -6635,33 +6635,33 @@ CVE-2021-33776 (HEVC Video Extensions Remote Code Execution Vulnerability This C
 CVE-2021-33775 (HEVC Video Extensions Remote Code Execution Vulnerability This CVE ID  ...)
 	TODO: check
 CVE-2021-33774 (Windows Event Tracing Elevation of Privilege Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33773 (Windows Remote Access Connection Manager Elevation of Privilege Vulner ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33772 (Windows TCP/IP Driver Denial of Service Vulnerability This CVE ID is u ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33771 (Windows Kernel Elevation of Privilege Vulnerability This CVE ID is uni ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33770
 	RESERVED
 CVE-2021-33769
 	RESERVED
 CVE-2021-33768 (Microsoft Exchange Server Elevation of Privilege Vulnerability This CV ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33767 (Open Enclave SDK Elevation of Privilege Vulnerability ...)
 	TODO: check
 CVE-2021-33766 (Microsoft Exchange Information Disclosure Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33765 (Windows Installer Spoofing Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33764 (Windows Key Distribution Center Information Disclosure Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33763 (Windows Remote Access Connection Manager Information Disclosure Vulner ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33762
 	RESERVED
 CVE-2021-33761 (Windows Remote Access Connection Manager Elevation of Privilege Vulner ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2021-33760 (Media Foundation Information Disclosure Vulnerability ...)
 	TODO: check
 CVE-2021-33759 (Windows Desktop Bridge Elevation of Privilege Vulnerability ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7448129b5d0299051d9c20004dfa7d3ac256f77c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7448129b5d0299051d9c20004dfa7d3ac256f77c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210714/626f4b05/attachment.htm>


More information about the debian-security-tracker-commits mailing list