[Git][security-tracker-team/security-tracker][master] Sort suites entries for ndpi
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Aug 27 20:45:51 BST 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
50e9faf0 by Salvatore Bonaccorso at 2022-08-27T21:45:26+02:00
Sort suites entries for ndpi
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -160132,8 +160132,8 @@ CVE-2020-15476 (In nDPI through 3.2, the Oracle protocol dissector has a heap-ba
NOTE: https://github.com/ntop/nDPI/commit/b69177be2fbe01c2442239a61832c44e40136c05 (3.4)
CVE-2020-15475 (In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c om ...)
- ndpi 3.4-1 (bug #972050)
- [stretch] - ndpi <not-affected> (Vulnerable code not present, content_disposition_line introduced later)
[buster] - ndpi <not-affected> (Vulnerable code not present, content_disposition_line introduced later)
+ [stretch] - ndpi <not-affected> (Vulnerable code not present, content_disposition_line introduced later)
NOTE: https://github.com/ntop/nDPI/commit/6a9f5e4f7c3fd5ddab3e6727b071904d76773952 (3.4)
CVE-2020-15474 (In nDPI through 3.2, there is a stack overflow in extractRDNSequence i ...)
- ndpi 3.4-1 (bug #972050)
@@ -160142,8 +160142,8 @@ CVE-2020-15474 (In nDPI through 3.2, there is a stack overflow in extractRDNSequ
NOTE: https://github.com/ntop/nDPI/commit/23594f036536468072198a57c59b6e9d63caf6ce (3.4)
CVE-2020-15473 (In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-bas ...)
- ndpi 3.4-1 (bug #972050)
+ [buster] - ndpi <ignored> (Patch cannot be cleanly applied. Codebase changed a lot)
[stretch] - ndpi <not-affected> (Vulnerable code introduced later)
- [buster] - ndpi <ignored> (Patch cannot be cleanly applied. Codebase changed a lot.)
NOTE: https://github.com/ntop/nDPI/commit/8e7b1ea7a136cc4e4aa9880072ec2d69900a825e (3.4)
CVE-2020-15472 (In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based ...)
- ndpi 3.4-1 (bug #972050)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50e9faf0a07ac237eb834f0ca0df963b66674542
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50e9faf0a07ac237eb834f0ca0df963b66674542
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220827/8842b339/attachment.htm>
More information about the debian-security-tracker-commits
mailing list