[Git][security-tracker-team/security-tracker][master] Sort suites entries for ndpi

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Aug 27 20:45:51 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
50e9faf0 by Salvatore Bonaccorso at 2022-08-27T21:45:26+02:00
Sort suites entries for ndpi

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -160132,8 +160132,8 @@ CVE-2020-15476 (In nDPI through 3.2, the Oracle protocol dissector has a heap-ba
 	NOTE: https://github.com/ntop/nDPI/commit/b69177be2fbe01c2442239a61832c44e40136c05 (3.4)
 CVE-2020-15475 (In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c om ...)
 	- ndpi 3.4-1 (bug #972050)
-	[stretch] - ndpi <not-affected> (Vulnerable code not present, content_disposition_line introduced later)
 	[buster] - ndpi <not-affected> (Vulnerable code not present, content_disposition_line introduced later)
+	[stretch] - ndpi <not-affected> (Vulnerable code not present, content_disposition_line introduced later)
 	NOTE: https://github.com/ntop/nDPI/commit/6a9f5e4f7c3fd5ddab3e6727b071904d76773952 (3.4)
 CVE-2020-15474 (In nDPI through 3.2, there is a stack overflow in extractRDNSequence i ...)
 	- ndpi 3.4-1 (bug #972050)
@@ -160142,8 +160142,8 @@ CVE-2020-15474 (In nDPI through 3.2, there is a stack overflow in extractRDNSequ
 	NOTE: https://github.com/ntop/nDPI/commit/23594f036536468072198a57c59b6e9d63caf6ce (3.4)
 CVE-2020-15473 (In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-bas ...)
 	- ndpi 3.4-1 (bug #972050)
+	[buster] - ndpi <ignored> (Patch cannot be cleanly applied. Codebase changed a lot)
 	[stretch] - ndpi <not-affected> (Vulnerable code introduced later)
-	[buster] - ndpi <ignored> (Patch cannot be cleanly applied. Codebase changed a lot.)
 	NOTE: https://github.com/ntop/nDPI/commit/8e7b1ea7a136cc4e4aa9880072ec2d69900a825e (3.4)
 CVE-2020-15472 (In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based ...)
 	- ndpi 3.4-1 (bug #972050)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50e9faf0a07ac237eb834f0ca0df963b66674542

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50e9faf0a07ac237eb834f0ca0df963b66674542
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220827/8842b339/attachment.htm>


More information about the debian-security-tracker-commits mailing list