László Böszörményi pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2be01f6f by Laszlo Boszormenyi (GCS) at 2019-01-08T00:11:53Z
Add CVE-2018-8791 - CVE-2018-8800, CVE-2018-20174 - CVE-2018-20182/rdesktop
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5939,24 +5939,24 @@ CVE-2018-20184 (In GraphicsMagick 1.4 snapshot-20181209
Q8, there is a heap-base
NOTE: https://sourceforge.net/p/graphicsmagick/bugs/583/
CVE-2018-20183
RESERVED
-CVE-2018-20182
- RESERVED
-CVE-2018-20181
- RESERVED
-CVE-2018-20180
- RESERVED
-CVE-2018-20179
- RESERVED
-CVE-2018-20178
- RESERVED
-CVE-2018-20177
- RESERVED
-CVE-2018-20176
- RESERVED
-CVE-2018-20175
- RESERVED
-CVE-2018-20174
- RESERVED
+CVE-2018-20182 [Remote code execution in seamless_process_line()]
+ - rdesktop <unfixed>
+CVE-2018-20181 [Remote code execution in seamless_process()]
+ - rdesktop <unfixed>
+CVE-2018-20180 [Remote code execution in rdpsnddbg_process()]
+ - rdesktop <unfixed>
+CVE-2018-20179 [Remote code execution in lspci_process()]
+ - rdesktop <unfixed>
+CVE-2018-20178 [DoS in process_demand_active()]
+ - rdesktop <unfixed>
+CVE-2018-20177 [Memory corruption in rdp_in_unistr()]
+ - rdesktop <unfixed>
+CVE-2018-20176 [DoS in sec_parse_crypt_info() and in sec_recv()]
+ - rdesktop <unfixed>
+CVE-2018-20175 [DoS in mcs_recv_connect_response() and in
mcs_parse_domain_params()]
+ - rdesktop <unfixed>
+CVE-2018-20174 [Major information leak in ui_clip_handle_data()]
+ - rdesktop <unfixed>
CVE-2018-20173 (Zoho ManageEngine OpManager 12.3 before 123238 allows SQL
injection via ...)
NOT-FOR-US: Zoho ManageEngine OpManager
CVE-2018-20346 (SQLite before 3.25.3, when the FTS3 extension is enabled,
encounters an ...)
@@ -42228,26 +42228,26 @@ CVE-2018-8802 (SQL injection vulnerability in the
management interface in ePorta
CVE-2018-8801 (GitLab Community and Enterprise Editions version 8.3 up to 10.x
before ...)
- gitlab 10.5.6+dfsg-1 (bug #893905)
NOTE:
https://about.gitlab.com/2018/03/20/critical-security-release-gitlab-10-dot-5-dot-6-released/
-CVE-2018-8800
- RESERVED
-CVE-2018-8799
- RESERVED
-CVE-2018-8798
- RESERVED
-CVE-2018-8797
- RESERVED
-CVE-2018-8796
- RESERVED
-CVE-2018-8795
- RESERVED
-CVE-2018-8794
- RESERVED
-CVE-2018-8793
- RESERVED
-CVE-2018-8792
- RESERVED
-CVE-2018-8791
- RESERVED
+CVE-2018-8800 [Remote code execution in ui_clip_handle_data()]
+ - rdesktop <unfixed>
+CVE-2018-8799 [DoS in process_secondary_order()
+ - rdesktop <unfixed>
+CVE-2018-8798 [Minor information leak in rdpsnd_process_ping()]
+ - rdesktop <unfixed>
+CVE-2018-8797 [Remote code execution in process_plane()]
+ - rdesktop <unfixed>
+CVE-2018-8796 [DoS in process_bitmap_data()]
+ - rdesktop <unfixed>
+CVE-2018-8795 [Remote code execution in process_bitmap_data()]
+ - rdesktop <unfixed>
+CVE-2018-8794 [Memory corruption in process_bitmap_data()]
+ - rdesktop <unfixed>
+CVE-2018-8793 [Remote code execution in cssp_read_tsrequest()]
+ - rdesktop <unfixed>
+CVE-2018-8792 [DoS in cssp_read_tsrequest()]
+ - rdesktop <unfixed>
+CVE-2018-8791 [Minor information leak in rdpdr_process()]
+ - rdesktop <unfixed>
CVE-2018-8790
RESERVED
CVE-2018-8789 (FreeRDP prior to version 2.0.0-rc4 contains several
Out-Of-Bounds ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2be01f6f3920270a2e3c0405b6b9df9c51e61b10
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2be01f6f3920270a2e3c0405b6b9df9c51e61b10
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
