diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2020-01-30 13:02:40 +0100 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2020-01-30 13:02:40 +0100 |
| commit | 0d53087f4209ff0543f51b4f58e7b43f573d425d (patch) | |
| tree | 61fa2fffd2e85130cf31f19c59589a1077344c43 | |
| parent | d10ab0e19ef16c563451d64a98e21a98bf930da6 (diff) | |
Update tracking for issues for exiv2 tracked in #868578
| -rw-r--r-- | data/CVE/list.2017 | 15 |
1 files changed, 5 insertions, 10 deletions
diff --git a/data/CVE/list.2017 b/data/CVE/list.2017 index c1b4626306..57e152d06f 100644 --- a/data/CVE/list.2017 +++ b/data/CVE/list.2017 @@ -21210,37 +21210,32 @@ CVE-2017-11341 (There is a heap based buffer over-read in lexer.hpp of LibSass 3 - libsass <undetermined> (bug #868577) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470714 CVE-2017-11340 (There is a Segmentation fault in the XmpParser::terminate() function i ...) - [experimental] - exiv2 <unfixed> (low; bug #868578) - - exiv2 <not-affected> (Vulnerable code introduced later) + - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578) NOTE: https://github.com/Exiv2/exiv2/issues/53 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470950 NOTE: Not reproducible in wheezy/jessie/stretch, I get "The file contains data of an unknown image type". NOTE: Reproducible with 0.26-1 (experimental) although I get another error "free(): invalid next size (fast)". CVE-2017-11339 (There is a heap-based buffer overflow in the Image::printIFDStructure ...) - [experimental] - exiv2 <unfixed> (bug #868578) - - exiv2 <not-affected> (Vulnerable code introduced after 0.25) + - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578) NOTE: https://github.com/Exiv2/exiv2/issues/52 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470946 NOTE: Not reproducible in wheezy/jessie/stretch, I get "The file contains data of an unknown image type". NOTE: Reproducible with 0.26-1 (experimental) although I get another error "free(): invalid next size (fast)". CVE-2017-11338 (There is an infinite loop in the Exiv2::Image::printIFDStructure funct ...) - [experimental] - exiv2 <unfixed> (low; bug #868578) - - exiv2 <not-affected> (Vulnerable code introduced after 0.25) + - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578) NOTE: https://github.com/Exiv2/exiv2/issues/51 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470913 NOTE: Not reproducible in wheezy/jessie/stretch, I get "No Exif data found in the file". NOTE: Reproducible with 0.26-1 (experimental). CVE-2017-11337 (There is an invalid free in the Action::TaskFactory::cleanup function ...) - [experimental] - exiv2 <unfixed> (low; bug #868578) - - exiv2 <not-affected> (Vulnerable code introduced after 0.25) + - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578) NOTE: https://github.com/Exiv2/exiv2/issues/50 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470737 NOTE: Not reproducible in wheezy/jessie/stretch (even with valgrind), I get "No Exif data found in the file". NOTE: Reproducible with 0.26-1 (experimental). NOTE: Action::TaskFactory::cleanup function is the same in all versions, so the problem is likely an earlier memory corruption. CVE-2017-11336 (There is a heap-based buffer over-read in the Image::printIFDStructure ...) - [experimental] - exiv2 <unfixed> (bug #868578) - - exiv2 <not-affected> (Vulnerable code introduced after 0.25) + - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578) NOTE: https://github.com/Exiv2/exiv2/issues/49 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470729 NOTE: Not reproducible in wheezy/jessie/stretch (even with valgrind). |