summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2020-01-30 13:02:40 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2020-01-30 13:02:40 +0100
commit01db6d32e1087cf1fde74689da6a5cd41a8e0767 (patch)
tree4284dc47efabbe1d88d7127406aac2c01ebe25b7
parent22c8f3eebd0c01a8c385ce601f902694376d0940 (diff)
Update tracking for issues for exiv2 tracked in #868578
-rw-r--r--data/CVE/2017.list15
1 files changed, 5 insertions, 10 deletions
diff --git a/data/CVE/2017.list b/data/CVE/2017.list
index c1b4626306..57e152d06f 100644
--- a/data/CVE/2017.list
+++ b/data/CVE/2017.list
@@ -21210,37 +21210,32 @@ CVE-2017-11341 (There is a heap based buffer over-read in lexer.hpp of LibSass 3
- libsass <undetermined> (bug #868577)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470714
CVE-2017-11340 (There is a Segmentation fault in the XmpParser::terminate() function i ...)
- [experimental] - exiv2 <unfixed> (low; bug #868578)
- - exiv2 <not-affected> (Vulnerable code introduced later)
+ - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
NOTE: https://github.com/Exiv2/exiv2/issues/53
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470950
NOTE: Not reproducible in wheezy/jessie/stretch, I get "The file contains data of an unknown image type".
NOTE: Reproducible with 0.26-1 (experimental) although I get another error "free(): invalid next size (fast)".
CVE-2017-11339 (There is a heap-based buffer overflow in the Image::printIFDStructure ...)
- [experimental] - exiv2 <unfixed> (bug #868578)
- - exiv2 <not-affected> (Vulnerable code introduced after 0.25)
+ - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
NOTE: https://github.com/Exiv2/exiv2/issues/52
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470946
NOTE: Not reproducible in wheezy/jessie/stretch, I get "The file contains data of an unknown image type".
NOTE: Reproducible with 0.26-1 (experimental) although I get another error "free(): invalid next size (fast)".
CVE-2017-11338 (There is an infinite loop in the Exiv2::Image::printIFDStructure funct ...)
- [experimental] - exiv2 <unfixed> (low; bug #868578)
- - exiv2 <not-affected> (Vulnerable code introduced after 0.25)
+ - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
NOTE: https://github.com/Exiv2/exiv2/issues/51
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470913
NOTE: Not reproducible in wheezy/jessie/stretch, I get "No Exif data found in the file".
NOTE: Reproducible with 0.26-1 (experimental).
CVE-2017-11337 (There is an invalid free in the Action::TaskFactory::cleanup function ...)
- [experimental] - exiv2 <unfixed> (low; bug #868578)
- - exiv2 <not-affected> (Vulnerable code introduced after 0.25)
+ - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
NOTE: https://github.com/Exiv2/exiv2/issues/50
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470737
NOTE: Not reproducible in wheezy/jessie/stretch (even with valgrind), I get "No Exif data found in the file".
NOTE: Reproducible with 0.26-1 (experimental).
NOTE: Action::TaskFactory::cleanup function is the same in all versions, so the problem is likely an earlier memory corruption.
CVE-2017-11336 (There is a heap-based buffer over-read in the Image::printIFDStructure ...)
- [experimental] - exiv2 <unfixed> (bug #868578)
- - exiv2 <not-affected> (Vulnerable code introduced after 0.25)
+ - exiv2 <not-affected> (Vulnerable code introduced after 0.25; only affected experimental; bug #868578)
NOTE: https://github.com/Exiv2/exiv2/issues/49
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470729
NOTE: Not reproducible in wheezy/jessie/stretch (even with valgrind).

© 2014-2024 Faster IT GmbH | imprint | privacy policy