summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2020-01-30 12:52:52 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2020-01-30 12:52:52 +0100
commitd1d8e4cb4e8ec83f2c6e6b44ebdf1aca81f6b633 (patch)
treefe7429893a44c0b4215fa9308d458182cb91b4b8
parentd2e0a01e31bac4d3f79c226b155156ec5f5bb300 (diff)
Update tracking for CVE-2018-19607/exiv2
-rw-r--r--data/CVE/2018.list3
1 files changed, 1 insertions, 2 deletions
diff --git a/data/CVE/2018.list b/data/CVE/2018.list
index 0cb57b7b76..08f4cfd7c5 100644
--- a/data/CVE/2018.list
+++ b/data/CVE/2018.list
@@ -4307,8 +4307,7 @@ CVE-2018-19608 (Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allo
NOTE: https://tls.mbed.org/tech-updates/releases/mbedtls-2.14.1-2.7.8-and-2.1.17-released
NOTE: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-03
CVE-2018-19607 (Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote att ...)
- [experimental] - exiv2 <unfixed> (bug #915134)
- - exiv2 <not-affected> (Vulnerable code introduced later)
+ - exiv2 <not-affected> (Vulnerable code introduced later; only affected experimental; bug #915134)
NOTE: Introduced by: https://github.com/Exiv2/exiv2/commit/97e7905a8b90fcbd5e8c440ad7d55bf8ffe007e5
NOTE: Fixed by: https://github.com/Exiv2/exiv2/commit/6e42c1b55e0fc4f360cc56010b0ffe19aa6062d9
CVE-2018-19606

© 2014-2024 Faster IT GmbH | imprint | privacy policy