[Git][security-tracker-team/security-tracker][master] Add new busybox issues (need further triage)

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
27a8d663 by Salvatore Bonaccorso at 2023-11-28T09:32:36+01:00
Add new busybox issues (need further triage)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -67,13 +67,17 @@ CVE-2023-46355 (In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules
 CVE-2023-46349 (In the module "Product Catalog (CSV, Excel) Export/Update" (updateprod ...)
 	TODO: check
 CVE-2023-42366 (A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_ ...)
-	TODO: check
+	- busybox <unfixed>
+	NOTE: https://bugs.busybox.net/show_bug.cgi?id=15874
 CVE-2023-42365 (A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via  ...)
-	TODO: check
+	- busybox <unfixed>
+	NOTE: https://bugs.busybox.net/show_bug.cgi?id=15871
 CVE-2023-42364 (A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to ...)
-	TODO: check
+	- busybox <unfixed>
+	NOTE: https://bugs.busybox.net/show_bug.cgi?id=15868
 CVE-2023-42363 (A use-after-free vulnerability was discovered in xasprintf function in ...)
-	TODO: check
+	- busybox <unfixed>
+	NOTE: https://bugs.busybox.net/show_bug.cgi?id=15865
 CVE-2023-3545 (Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo  ...)
 	TODO: check
 CVE-2023-3533 (Path traversal in file upload functionality in `/main/webservices/addi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27a8d66313905b240bd23867073a0718a7011bef

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27a8d66313905b240bd23867073a0718a7011bef
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231128/282e2220/attachment.htm>