[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Sep 23 09:10:21 BST 2021 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4a695e6a by security tracker role at 2021-09-23T08:10:12+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,9 @@
+CVE-2021-41570
+	RESERVED
+CVE-2021-41569
+	RESERVED
+CVE-2021-3826
+	RESERVED
 CVE-2021-41568
 	RESERVED
 CVE-2021-41567
@@ -15646,14 +15652,14 @@ CVE-2021-34772
 	RESERVED
 CVE-2021-34771 (A vulnerability in the Cisco IOS XR Software CLI could allow an authen ...)
 	NOT-FOR-US: Cisco
-CVE-2021-34770
-	RESERVED
-CVE-2021-34769
-	RESERVED
-CVE-2021-34768
-	RESERVED
-CVE-2021-34767
-	RESERVED
+CVE-2021-34770 (A vulnerability in the Control and Provisioning of Wireless Access Poi ...)
+	TODO: check
+CVE-2021-34769 (Multiple vulnerabilities in the Control and Provisioning of Wireless A ...)
+	TODO: check
+CVE-2021-34768 (Multiple vulnerabilities in the Control and Provisioning of Wireless A ...)
+	TODO: check
+CVE-2021-34767 (A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Co ...)
+	TODO: check
 CVE-2021-34766
 	RESERVED
 CVE-2021-34765 (A vulnerability in the web UI for Cisco Nexus Insights could allow an  ...)
@@ -15706,8 +15712,8 @@ CVE-2021-34742
 	RESERVED
 CVE-2021-34741
 	RESERVED
-CVE-2021-34740
-	RESERVED
+CVE-2021-34740 (A vulnerability in the WLAN Control Protocol (WCP) implementation for  ...)
+	TODO: check
 CVE-2021-34739
 	RESERVED
 CVE-2021-34738
@@ -15728,20 +15734,20 @@ CVE-2021-34731
 	RESERVED
 CVE-2021-34730 (A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco ...)
 	NOT-FOR-US: Cisco
-CVE-2021-34729
-	RESERVED
+CVE-2021-34729 (A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco I ...)
+	TODO: check
 CVE-2021-34728 (Multiple vulnerabilities in the CLI of Cisco IOS XR Software could all ...)
 	NOT-FOR-US: Cisco
-CVE-2021-34727
-	RESERVED
-CVE-2021-34726
-	RESERVED
-CVE-2021-34725
-	RESERVED
-CVE-2021-34724
-	RESERVED
-CVE-2021-34723
-	RESERVED
+CVE-2021-34727 (A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software ...)
+	TODO: check
+CVE-2021-34726 (A vulnerability in the CLI of Cisco SD-WAN Software could allow an aut ...)
+	TODO: check
+CVE-2021-34725 (A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow ...)
+	TODO: check
+CVE-2021-34724 (A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an ...)
+	TODO: check
+CVE-2021-34723 (A vulnerability in a specific CLI command that is run on Cisco IOS XE  ...)
+	TODO: check
 CVE-2021-34722 (Multiple vulnerabilities in the CLI of Cisco IOS XR Software could all ...)
 	NOT-FOR-US: Cisco
 CVE-2021-34721 (Multiple vulnerabilities in the CLI of Cisco IOS XR Software could all ...)
@@ -15758,12 +15764,12 @@ CVE-2021-34716 (A vulnerability in the web-based management interface of Cisco E
 	NOT-FOR-US: Cisco
 CVE-2021-34715 (A vulnerability in the image verification function of Cisco Expressway ...)
 	NOT-FOR-US: Cisco
-CVE-2021-34714
-	RESERVED
+CVE-2021-34714 (A vulnerability in the Unidirectional Link Detection (UDLD) feature of ...)
+	TODO: check
 CVE-2021-34713 (A vulnerability in the Layer 2 punt code of Cisco IOS XR Software runn ...)
 	NOT-FOR-US: Cisco
-CVE-2021-34712
-	RESERVED
+CVE-2021-34712 (A vulnerability in the web-based management interface of Cisco SD-WAN  ...)
+	TODO: check
 CVE-2021-34711
 	RESERVED
 CVE-2021-34710
@@ -15776,26 +15782,26 @@ CVE-2021-34707 (A vulnerability in the REST API of Cisco Evolved Programmable Ne
 	NOT-FOR-US: Cisco
 CVE-2021-34706
 	RESERVED
-CVE-2021-34705
-	RESERVED
+CVE-2021-34705 (A vulnerability in the Voice Telephony Service Provider (VTSP) service ...)
+	TODO: check
 CVE-2021-34704
 	RESERVED
-CVE-2021-34703
-	RESERVED
+CVE-2021-34703 (A vulnerability in the Link Layer Discovery Protocol (LLDP) message pa ...)
+	TODO: check
 CVE-2021-34702
 	RESERVED
 CVE-2021-34701
 	RESERVED
 CVE-2021-34700 (A vulnerability in the CLI interface of Cisco SD-WAN vManage Software  ...)
 	NOT-FOR-US: Cisco
-CVE-2021-34699
-	RESERVED
+CVE-2021-34699 (A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS  ...)
+	TODO: check
 CVE-2021-34698
 	RESERVED
-CVE-2021-34697
-	RESERVED
-CVE-2021-34696
-	RESERVED
+CVE-2021-34697 (A vulnerability in the Protection Against Distributed Denial of Servic ...)
+	TODO: check
+CVE-2021-34696 (A vulnerability in the access control list (ACL) programming of Cisco  ...)
+	TODO: check
 CVE-2021-3605 (There's a flaw in OpenEXR's rleUncompress functionality in versions pr ...)
 	{DLA-2732-1}
 	- openexr 2.5.7-1 (bug #990899)
@@ -58928,36 +58934,36 @@ CVE-2020-28640
 	RESERVED
 CVE-2020-28639
 	RESERVED
-CVE-2021-1625
-	RESERVED
-CVE-2021-1624
-	RESERVED
-CVE-2021-1623
-	RESERVED
-CVE-2021-1622
-	RESERVED
-CVE-2021-1621
-	RESERVED
-CVE-2021-1620
-	RESERVED
-CVE-2021-1619
-	RESERVED
+CVE-2021-1625 (A vulnerability in the Zone-Based Policy Firewall feature of Cisco IOS ...)
+	TODO: check
+CVE-2021-1624 (A vulnerability in the Rate Limiting Network Address Translation (NAT) ...)
+	TODO: check
+CVE-2021-1623 (A vulnerability in the Simple Network Management Protocol (SNMP) punt  ...)
+	TODO: check
+CVE-2021-1622 (A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS  ...)
+	TODO: check
+CVE-2021-1621 (A vulnerability in the Layer 2 punt code of Cisco IOS XE Software coul ...)
+	TODO: check
+CVE-2021-1620 (A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support ...)
+	TODO: check
+CVE-2021-1619 (A vulnerability in the authentication, authorization, and accounting ( ...)
+	TODO: check
 CVE-2021-1618 (Multiple vulnerabilities in the web-based management interface of Cisc ...)
 	NOT-FOR-US: Cisco
 CVE-2021-1617 (Multiple vulnerabilities in the web-based management interface of Cisc ...)
 	NOT-FOR-US: Cisco
-CVE-2021-1616
-	RESERVED
-CVE-2021-1615
-	RESERVED
+CVE-2021-1616 (A vulnerability in the H.323 application level gateway (ALG) used by t ...)
+	TODO: check
+CVE-2021-1615 (A vulnerability in the packet processing functionality of Cisco Embedd ...)
+	TODO: check
 CVE-2021-1614 (A vulnerability in the Multiprotocol Label Switching (MPLS) packet han ...)
 	NOT-FOR-US: Cisco
 CVE-2021-1613
 	RESERVED
-CVE-2021-1612
-	RESERVED
-CVE-2021-1611
-	RESERVED
+CVE-2021-1612 (A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an ...)
+	TODO: check
+CVE-2021-1611 (A vulnerability in Ethernet over GRE (EoGRE) packet processing of Cisc ...)
+	TODO: check
 CVE-2021-1610 (Multiple vulnerabilities in the web-based management interface of the  ...)
 	NOT-FOR-US: Cisco
 CVE-2021-1609 (Multiple vulnerabilities in the web-based management interface of the  ...)
@@ -59000,8 +59006,8 @@ CVE-2021-1591 (A vulnerability in the EtherChannel port subscription logic of Ci
 	NOT-FOR-US: Cisco
 CVE-2021-1590 (A vulnerability in the implementation of the system login block-for co ...)
 	NOT-FOR-US: Cisco
-CVE-2021-1589
-	RESERVED
+CVE-2021-1589 (A vulnerability in the disaster recovery feature of Cisco SD-WAN vMana ...)
+	TODO: check
 CVE-2021-1588 (A vulnerability in the MPLS Operation, Administration, and Maintenance ...)
 	NOT-FOR-US: Cisco
 CVE-2021-1587 (A vulnerability in the VXLAN Operation, Administration, and Maintenanc ...)
@@ -59048,8 +59054,8 @@ CVE-2021-1567 (A vulnerability in the DLL loading mechanism of Cisco AnyConnect
 	NOT-FOR-US: Cisco
 CVE-2021-1566 (A vulnerability in the Cisco Advanced Malware Protection (AMP) for End ...)
 	NOT-FOR-US: Cisco
-CVE-2021-1565
-	RESERVED
+CVE-2021-1565 (Multiple vulnerabilities in the Control and Provisioning of Wireless A ...)
+	TODO: check
 CVE-2021-1564 (Multiple vulnerabilities in the implementation of the Cisco Discovery  ...)
 	NOT-FOR-US: Cisco
 CVE-2021-1563 (Multiple vulnerabilities in the implementation of the Cisco Discovery  ...)
@@ -59086,8 +59092,8 @@ CVE-2021-1548 (Multiple vulnerabilities in the web-based management interface of
 	NOT-FOR-US: Cisco
 CVE-2021-1547 (Multiple vulnerabilities in the web-based management interface of cert ...)
 	NOT-FOR-US: Cisco
-CVE-2021-1546
-	RESERVED
+CVE-2021-1546 (A vulnerability in the CLI of Cisco SD-WAN Software could allow an aut ...)
+	TODO: check
 CVE-2021-1545
 	RESERVED
 CVE-2021-1544 (A vulnerability in logging mechanisms of Cisco Webex Meetings client s ...)
@@ -59340,8 +59346,8 @@ CVE-2021-1421 (A vulnerability in Cisco Enterprise NFV Infrastructure Software (
 	NOT-FOR-US: Cisco
 CVE-2021-1420 (A vulnerability in certain web pages of Cisco Webex Meetings could all ...)
 	NOT-FOR-US: Cisco
-CVE-2021-1419
-	RESERVED
+CVE-2021-1419 (A vulnerability in the SSH management feature of multiple Cisco Access ...)
+	TODO: check
 CVE-2021-1418 (Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for ...)
 	NOT-FOR-US: Cisco
 CVE-2021-1417 (Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for ...)
@@ -74643,14 +74649,14 @@ CVE-2020-23483
 	RESERVED
 CVE-2020-23482
 	RESERVED
-CVE-2020-23481
-	RESERVED
+CVE-2020-23481 (CMS Made Simple 2.2.14 was discovered to contain a cross-site scriptin ...)
+	TODO: check
 CVE-2020-23480
 	RESERVED
 CVE-2020-23479
 	RESERVED
-CVE-2020-23478
-	RESERVED
+CVE-2020-23478 (Leo Editor v6.2.1 was discovered to contain a regular expression denia ...)
+	TODO: check
 CVE-2020-23477
 	RESERVED
 CVE-2020-23476
@@ -74667,8 +74673,8 @@ CVE-2020-23471
 	RESERVED
 CVE-2020-23470
 	RESERVED
-CVE-2020-23469
-	RESERVED
+CVE-2020-23469 (gmate v0.12+bionic contains a regular expression denial of service (Re ...)
+	TODO: check
 CVE-2020-23468
 	RESERVED
 CVE-2020-23467



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a695e6aed8bd4fc4188a68f7804c56effaa0fd8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a695e6aed8bd4fc4188a68f7804c56effaa0fd8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210923/31d548a4/attachment.htm>

More information about the debian-security-tracker-commits mailing list