[Git][security-tracker-team/security-tracker][master] new raptor2 issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f22ecc2a by Moritz Muehlenhoff at 2025-01-11T12:44:12+01:00
new raptor2 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -67,13 +67,17 @@ CVE-2024-6880 (During MegaBIP installation process, a user is encouraged to chan
 CVE-2024-6662 (Websites managed by MegaBIP in versions below 5.15 are vulnerable to C ...)
 	NOT-FOR-US: MegaBIP
 CVE-2024-6437 (On affected platforms running Arista EOS with one of the following fea ...)
-	TODO: check
+	NOT-FOR-US: Arista EOS
 CVE-2024-5872 (On affected platforms running Arista EOS, a specially crafted packet w ...)
-	NOT-FOR-US: MegaBIP
+	NOT-FOR-US: Arista EOS
 CVE-2024-57823 (In Raptor RDF Syntax Library through 2.0.16, there is an integer under ...)
-	TODO: check
+	- raptor2 <unfixed> (bug #1067896)
+	NOTE: https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md
+	NOTE: https://github.com/dajobe/raptor/issues/70
 CVE-2024-57822 (In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buf ...)
-	TODO: check
+	- raptor2 <unfixed> (bug #1067896)
+	NOTE: https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md
+	NOTE: https://github.com/dajobe/raptor/issues/70
 CVE-2024-57687 (An OS Command Injection vulnerability was found in /landrecordsys/admi ...)
 	NOT-FOR-US: PHPGurukul Land Record System
 CVE-2024-57686 (A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f22ecc2a9fd72dd16c9694247b1a9a63e1f59699

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f22ecc2a9fd72dd16c9694247b1a9a63e1f59699
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250111/f3df52ce/attachment-0001.htm>