diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2020-01-27 22:40:57 +0100 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2020-01-27 22:40:57 +0100 |
| commit | ab29ab4c07313f5f4576afd86ec9efddd9946058 (patch) | |
| tree | 993225ee1edf7f6067199cdbba36f7bac5478ed0 | |
| parent | 7b762d0396aecef010c03849009c16c0e6109cc0 (diff) | |
Update information on CVE-2020-6840
| -rw-r--r-- | data/CVE/list.2020 | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/data/CVE/list.2020 b/data/CVE/list.2020 index cca678ac3f..006bee07b0 100644 --- a/data/CVE/list.2020 +++ b/data/CVE/list.2020 @@ -2547,11 +2547,10 @@ CVE-2020-6842 CVE-2020-6841 RESERVED CVE-2020-6840 (In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mru ...) - - mruby <unfixed> - [jessie] - mruby <not-affected> (Vulnerable introduced later) + - mruby <not-affected> (Vulnerable code introduced later) NOTE: https://github.com/mruby/mruby/issues/4927 - NOTE: https://github.com/mruby/mruby/commit/fc8fb41451b07b3fda0726ba80e88e509ad02452 - TODO: check + NOTE: Introduced by: https://github.com/mruby/mruby/commit/694089fafe4eae36c379a3d918d540eb0c4b8661 + NOTE: Fixed by: https://github.com/mruby/mruby/commit/fc8fb41451b07b3fda0726ba80e88e509ad02452 CVE-2020-6839 (In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_ ...) - mruby <undetermined> [jessie] - mruby <ignored> (Minor issue) |