[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Sep 26 21:32:09 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e446aa82 by Salvatore Bonaccorso at 2023-09-26T22:31:39+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -68,7 +68,7 @@ CVE-2023-39347 (Cilium is a networking, observability, and security solution wit
 CVE-2023-34043 (VMware Aria Operations contains a local privilege escalation vulnerabi ...)
 	NOT-FOR-US: VMware
 CVE-2023-32541 (A use-after-free vulnerability exists in the footerr functionality of  ...)
-	TODO: check
+	NOT-FOR-US: Hancom Office 2020 HWord
 CVE-2023-5176
 	- firefox <unfixed>
 	- firefox-esr <unfixed>
@@ -282,23 +282,23 @@ CVE-2023-3226 (The Popup Builder WordPress plugin through 4.1.15 does not saniti
 CVE-2023-39640 (UpLight cookiebanner before 1.5.1 was discovered to contain a SQL inje ...)
 	NOT-FOR-US: UpLight cookiebanner
 CVE-2023-39453 (A use-after-free vulnerability exists in the tif_parse_sub_IFD functio ...)
-	TODO: check
+	NOT-FOR-US: Accusoft ImageGear
 CVE-2023-39409 (DoS vulnerability in the PMS module. Successful exploitation of this v ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2023-39408 (DoS vulnerability in the PMS module. Successful exploitation of this v ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2023-39407 (The Watchkit has a risk of unauthorized file access.Successful exploit ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2023-35002 (A heap-based buffer overflow vulnerability exists in the pictwread fun ...)
-	TODO: check
+	NOT-FOR-US: Accusoft ImageGear
 CVE-2023-32653 (An out-of-bounds write vulnerability exists in the dcm_pixel_data_deco ...)
-	TODO: check
+	NOT-FOR-US: Accusoft ImageGear
 CVE-2023-32614 (A heap-based buffer overflow vulnerability exists in the create_png_ob ...)
-	TODO: check
+	NOT-FOR-US: Accusoft ImageGear
 CVE-2023-32284 (An out-of-bounds write vulnerability exists in the tiff_planar_adobe f ...)
-	TODO: check
+	NOT-FOR-US: Accusoft ImageGear
 CVE-2022-48605 (Input verification vulnerability in the fingerprint module. Successful ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2023-42755 [wild pointer access in rsvp classifer in the Linux kernel]
 	- linux 6.3.7-1
 	NOTE: https://lore.kernel.org/all/CADW8OBtkAf+nGokhD9zCFcmiebL1SM8bJp_oo=pE02BknG9qnQ@mail.gmail.com/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e446aa82340530f26a24916bb294ef4545694a4d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e446aa82340530f26a24916bb294ef4545694a4d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230926/15a491f7/attachment.htm>


More information about the debian-security-tracker-commits mailing list