Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
99adbddc by security tracker role at 2019-10-31T08:10:12Z
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,53 @@
+CVE-2019-18649
+       RESERVED
+CVE-2019-18648
+       RESERVED
+CVE-2019-18647
+       RESERVED
+CVE-2019-18646
+       RESERVED
+CVE-2019-18645 (The quarantine restoration function in Total Defense 
Anti-virus 11.5.2 ...)
+       TODO: check
+CVE-2019-18644 (The malware scan function in Total Defense Anti-virus 
11.5.2.28 is vul ...)
+       TODO: check
+CVE-2019-18643
+       RESERVED
+CVE-2019-18642
+       RESERVED
+CVE-2019-18641
+       RESERVED
+CVE-2019-18640
+       RESERVED
+CVE-2019-18639
+       RESERVED
+CVE-2019-18638
+       RESERVED
+CVE-2019-18637
+       RESERVED
+CVE-2019-18636
+       RESERVED
+CVE-2019-18635 (An issue was discovered in Mooltipass Moolticute through 
v0.42.1 and v ...)
+       TODO: check
+CVE-2019-18634
+       RESERVED
+CVE-2019-18633 (European Commission eIDAS-Node Integration Package before 
2.3.1 has Mi ...)
+       TODO: check
+CVE-2019-18632 (European Commission eIDAS-Node Integration Package before 
2.3.1 allows ...)
+       TODO: check
+CVE-2019-18631
+       RESERVED
+CVE-2019-18630
+       RESERVED
+CVE-2019-18629
+       RESERVED
+CVE-2019-18628
+       RESERVED
+CVE-2019-18627
+       RESERVED
+CVE-2019-18626
+       RESERVED
+CVE-2018-21029 (systemd 239 through 243 accepts any certificate signed by a 
trusted ce ...)
+       TODO: check
 CVE-2019-18625
        RESERVED
 CVE-2019-18624 (Opera Mini for Android allows attackers to bypass intended 
restriction ...)
@@ -3485,8 +3535,8 @@ CVE-2019-17553 (An issue was discovered in MetInfo v7.0.0 
beta. There is SQL Inj
        NOT-FOR-US: MetInfo
 CVE-2019-17552 (An issue was discovered in idreamsoft iCMS v7.0.14. There is a 
spider_ ...)
        NOT-FOR-US: idreamsoft iCMS
-CVE-2019-17551
-       RESERVED
+CVE-2019-17551 (Apak Wholesale Floorplanning Finance 6.31.8.3 and 6.31.8.5 
allows XSS  ...)
+       TODO: check
 CVE-2019-17550
        RESERVED
 CVE-2019-17549
@@ -4193,18 +4243,18 @@ CVE-2019-17328
        RESERVED
 CVE-2019-17327
        RESERVED
-CVE-2019-17326
-       RESERVED
-CVE-2019-17325
-       RESERVED
-CVE-2019-17324
-       RESERVED
-CVE-2019-17323
-       RESERVED
-CVE-2019-17322
-       RESERVED
-CVE-2019-17321
-       RESERVED
+CVE-2019-17326 (ClipSoft REXPERT 1.0.0.527 and earlier version allows remote 
attacker  ...)
+       TODO: check
+CVE-2019-17325 (ClipSoft REXPERT 1.0.0.527 and earlier version allows remote 
attacker  ...)
+       TODO: check
+CVE-2019-17324 (ClipSoft REXPERT 1.0.0.527 and earlier version allows 
directory traver ...)
+       TODO: check
+CVE-2019-17323 (ClipSoft REXPERT 1.0.0.527 and earlier version allows 
arbitrary file c ...)
+       TODO: check
+CVE-2019-17322 (ClipSoft REXPERT 1.0.0.527 and earlier version allows 
arbitrary file c ...)
+       TODO: check
+CVE-2019-17321 (ClipSoft REXPERT 1.0.0.527 and earlier version have an 
information dis ...)
+       TODO: check
 CVE-2019-17320 (NetSarang XFTP Client 6.0149 and earlier version contains a 
buffer ove ...)
        NOT-FOR-US: NetSarang XFTP Client
 CVE-2019-17319 (SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL 
injection in the ...)
@@ -8567,7 +8617,7 @@ CVE-2019-15683 (TurboVNC server code contains stack 
buffer overflow vulnerabilit
 CVE-2019-15682 (RDesktop version 1.8.4 contains multiple out-of-bound access 
read vuln ...)
        TODO: check
 CVE-2019-15681 (LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a 
contains ...)
-       {DLA-1977-1}
+       {DLA-1979-1 DLA-1977-1}
        - libvncserver <unfixed> (bug #943793)
        - italc <removed>
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a
@@ -19272,8 +19322,8 @@ CVE-2019-12419
        RESERVED
 CVE-2019-12418
        RESERVED
-CVE-2019-12417
-       RESERVED
+CVE-2019-12417 (A malicious admin user could edit the state of objects in the 
Airflow  ...)
+       TODO: check
 CVE-2019-12416
        RESERVED
 CVE-2019-12415 (In Apache POI up to 4.1.0, when using the tool XSSFExportToXml 
to conv ...)
@@ -23836,8 +23886,8 @@ CVE-2019-10764
        RESERVED
 CVE-2019-10763
        RESERVED
-CVE-2019-10762
-       RESERVED
+CVE-2019-10762 (columnQuote in medoo before 1.7.5 allows remote attackers to 
perform a ...)
+       TODO: check
 CVE-2019-10761
        RESERVED
 CVE-2019-10760 (safer-eval before 1.3.2 are vulnerable to Arbitrary Code 
Execution. A  ...)
@@ -48612,35 +48662,35 @@ CVE-2018-20026 (Improper Communication Address 
Filtering exists in CODESYS V3 pr
 CVE-2018-20025 (Use of Insufficiently Random Values exists in CODESYS V3 
products vers ...)
        NOT-FOR-US: 3S-Smart Software Solutions GmbH CODESYS V3 Products
 CVE-2018-20024 (LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 
contains ...)
-       {DSA-4383-1 DLA-1617-1}
+       {DSA-4383-1 DLA-1979-1 DLA-1617-1}
        - libvncserver 0.9.11+dfsg-1.2 (bug #916941)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/issues/254
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7
        NOTE: 
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-034-libvnc-null-pointer-dereference/
 CVE-2018-20023 (LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 
contains CWE-66 ...)
-       {DSA-4383-1 DLA-1617-1}
+       {DSA-4383-1 DLA-1979-1 DLA-1617-1}
        - libvncserver 0.9.11+dfsg-1.2 (bug #916941)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/issues/253
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/8b06f835e259652b0ff026898014fc7297ade858
        NOTE: 
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-033-libvnc-memory-leak/
 CVE-2018-20022 (LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 
contains multip ...)
-       {DSA-4383-1 DLA-1617-1}
+       {DSA-4383-1 DLA-1979-1 DLA-1617-1}
        - libvncserver 0.9.11+dfsg-1.2 (bug #916941)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/issues/252
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/2f5b2ad1c6c99b1ac6482c95844a84d66bb52838
        NOTE: 
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-032-libvnc-multiple-memory-leaks/
 CVE-2018-20021 (LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c 
contains ...)
-       {DSA-4383-1 DLA-1617-1}
+       {DSA-4383-1 DLA-1979-1 DLA-1617-1}
        - libvncserver 0.9.11+dfsg-1.2 (bug #916941)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/issues/251
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c
        NOTE: 
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-031-libvnc-infinite-loop/
 CVE-2018-20020 (LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d 
contains ...)
-       {DSA-4383-1 DLA-1617-1}
+       {DSA-4383-1 DLA-1979-1 DLA-1617-1}
        - libvncserver 0.9.11+dfsg-1.2 (bug #916941)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/issues/250
@@ -48648,7 +48698,7 @@ CVE-2018-20020 (LibVNC before commit 
7b1ef0ffc4815cab9a96c7278394152bdc89dc4d co
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/7b1ef0ffc4815cab9a96c7278394152bdc89dc4d
        NOTE: 
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-030-libvnc-heap-out-of-bound-write/
 CVE-2018-20748 (LibVNC before 0.9.12 contains multiple heap out-of-bounds 
write vulner ...)
-       {DLA-1652-1}
+       {DLA-1979-1 DLA-1652-1}
        - libvncserver 0.9.11+dfsg-1.3 (bug #920941)
        - italc <removed>
        [stretch] - libvncserver <not-affected> (Incomplete fix for 
CVE-2018-20019 not applied)
@@ -48657,7 +48707,7 @@ CVE-2018-20748 (LibVNC before 0.9.12 contains multiple 
heap out-of-bounds write
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/c2c4b81e6cb3b485fb1ec7ba9e7defeb889f6ba7
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/a64c3b37af9a6c8f8009d7516874b8d266b42bae
 CVE-2018-20019 (LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f 
contains ...)
-       {DSA-4383-1 DLA-1617-1}
+       {DSA-4383-1 DLA-1979-1 DLA-1617-1}
        - libvncserver 0.9.11+dfsg-1.2 (bug #916941)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/issues/247
@@ -65507,19 +65557,19 @@ CVE-2018-15129 (ThinkSAAS through 2018-07-25 has XSS 
via the index.php?app=artic
 CVE-2018-15128 (An issue was discovered in Polycom Group Series 6.1.6.1 and 
earlier, H ...)
        NOT-FOR-US: Polycom Group Series
 CVE-2018-20750 (LibVNC through 0.9.12 contains a heap out-of-bounds write 
vulnerabilit ...)
-       {DLA-1652-1}
+       {DLA-1979-1 DLA-1652-1}
        - libvncserver 0.9.11+dfsg-1.3 (bug #920941)
        - italc <removed>
        [stretch] - libvncserver <not-affected> (Incomplete fix for 
CVE-2018-15127 not applied)
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec
 CVE-2018-20749 (LibVNC before 0.9.12 contains a heap out-of-bounds write 
vulnerability ...)
-       {DLA-1652-1}
+       {DLA-1979-1 DLA-1652-1}
        - libvncserver 0.9.11+dfsg-1.3 (bug #920941)
        - italc <removed>
        [stretch] - libvncserver <not-affected> (Incomplete fix for 
CVE-2018-15127 not applied)
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/15bb719c03cc70f14c36a843dcb16ed69b405707
 CVE-2018-15127 (LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de 
contains ...)
-       {DSA-4383-1 DLA-1617-1}
+       {DSA-4383-1 DLA-1979-1 DLA-1617-1}
        - libvncserver 0.9.11+dfsg-1.2 (bug #916941)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/issues/243
@@ -65530,7 +65580,7 @@ CVE-2018-15127 (LibVNC before commit 
502821828ed00b4a2c4bef90683d0fd88ce495de co
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/15bb719c03cc70f14c36a843dcb16ed69b405707
        NOTE: 
https://github.com/LibVNC/libvncserver/commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec
 CVE-2018-15126 (LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b 
contains ...)
-       {DSA-4383-1 DLA-1652-1}
+       {DSA-4383-1 DLA-1979-1 DLA-1652-1}
        - libvncserver 0.9.11+dfsg-1.2 (bug #916941)
        NOTE: https://github.com/LibVNC/libvncserver/issues/242
        NOTE: Fixed by: 
https://github.com/LibVNC/libvncserver/commit/162d716b4c095a87aab2261857d583d68e3b3ea6
 (merge of fix-#242)
@@ -87087,7 +87137,7 @@ CVE-2018-7226 (An issue was discovered in 
vcSetXCutTextProc() in VNConsole.c in
        [stretch] - vncterm <no-dsa> (Minor issue)
        NOTE: https://github.com/LibVNC/vncterm/issues/6
 CVE-2018-7225 (An issue was discovered in LibVNCServer through 0.9.11. 
rfbProcessClie ...)
-       {DSA-4221-1 DLA-1332-1}
+       {DSA-4221-1 DLA-1979-1 DLA-1332-1}
        - libvncserver 0.9.11+dfsg-1.1 (bug #894045)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/issues/218
@@ -89934,7 +89984,7 @@ CVE-2018-6309
 CVE-2018-6308 (Multiple SQL injections exist in SugarCRM Community Edition 
6.5.26 and ...)
        NOT-FOR-US: SugarCRM
 CVE-2018-6307 (LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b 
contains ...)
-       {DSA-4383-1 DLA-1617-1}
+       {DSA-4383-1 DLA-1979-1 DLA-1617-1}
        - libvncserver 0.9.11+dfsg-1.2 (bug #916941)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/issues/241
@@ -149767,13 +149817,13 @@ CVE-2016-9944
 CVE-2016-9943
        RESERVED
 CVE-2016-9942 (Heap-based buffer overflow in ultra.c in LibVNCClient in 
LibVNCServer  ...)
-       {DSA-3753-1 DLA-777-1}
+       {DSA-3753-1 DLA-1979-1 DLA-777-1}
        - libvncserver 0.9.11+dfsg-1 (bug #850008)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/pull/137
        NOTE: 
https://github.com/LibVNC/libvncserver/pull/137/commits/5fff4353f66427b467eb29e5fdc1da4f2be028bb
 CVE-2016-9941 (Heap-based buffer overflow in rfbproto.c in LibVNCClient in 
LibVNCServ ...)
-       {DSA-3753-1 DLA-777-1}
+       {DSA-3753-1 DLA-1979-1 DLA-777-1}
        - libvncserver 0.9.11+dfsg-1 (bug #850007)
        - italc <removed>
        NOTE: https://github.com/LibVNC/libvncserver/pull/137
@@ -225050,7 +225100,7 @@ CVE-2014-6057
 CVE-2014-6056
        RESERVED
 CVE-2014-6055 (Multiple stack-based buffer overflows in the File Transfer 
feature in  ...)
-       {DSA-3081-1 DLA-197-1}
+       {DSA-3081-1 DLA-1979-1 DLA-197-1}
        - libvncserver 0.9.9+dfsg-6.1 (bug #762745)
        - italc <removed>
        NOTE: 
https://github.com/newsoft/libvncserver/commit/06ccdf016154fde8eccb5355613ba04c59127b2e
@@ -225058,7 +225108,7 @@ CVE-2014-6055 (Multiple stack-based buffer overflows 
in the File Transfer featur
        NOTE: 
https://github.com/newsoft/libvncserver/commit/256964b884c980038cd8b2f0d180fbb295b1c748
 (improvement)
        NOTE: check for possible ABI break: 
https://bugzilla.redhat.com/show_bug.cgi?id=1144293#c2
 CVE-2014-6054 (The rfbProcessClientNormalMessage function in 
libvncserver/rfbserver.c ...)
-       {DSA-3081-1 DLA-197-1}
+       {DSA-3081-1 DLA-1979-1 DLA-197-1}
        - libvncserver 0.9.9+dfsg-6.1 (bug #762745)
        - italc <removed>
        NOTE: 
https://github.com/newsoft/libvncserver/commit/05a9bd41a8ec0a9d580a8f420f41718bdd235446
@@ -225067,17 +225117,17 @@ CVE-2014-6054 (The rfbProcessClientNormalMessage 
function in libvncserver/rfbser
        NOTE: 
https://github.com/newsoft/libvncserver/commit/819481c5e2003cd36d002336c248de8c75de362e
 (hardening)
        NOTE: 
https://github.com/newsoft/libvncserver/commit/e5d9b6a07257c12bf3b6242ddea79ea1c95353a8
 (hardening)
 CVE-2014-6053 (The rfbProcessClientNormalMessage function in 
libvncserver/rfbserver.c ...)
-       {DSA-3081-1 DLA-197-1}
+       {DSA-3081-1 DLA-1979-1 DLA-197-1}
        - libvncserver 0.9.9+dfsg-6.1 (bug #762745)
        - italc <removed>
        NOTE: 
https://github.com/newsoft/libvncserver/commit/6037a9074d52b1963c97cb28ea1096c7c14cbf28
 CVE-2014-6052 (The HandleRFBServerMessage function in libvncclient/rfbproto.c 
in LibV ...)
-       {DSA-3081-1 DLA-197-1}
+       {DSA-3081-1 DLA-1979-1 DLA-197-1}
        - libvncserver 0.9.9+dfsg-6.1 (bug #762745)
        - italc <removed>
        NOTE: 
https://github.com/newsoft/libvncserver/commit/85a778c0e45e87e35ee7199f1f25020648e8b812
 CVE-2014-6051 (Integer overflow in the MallocFrameBuffer function in 
vncviewer.c in L ...)
-       {DSA-3081-1 DLA-197-1}
+       {DSA-3081-1 DLA-1979-1 DLA-197-1}
        - libvncserver 0.9.9+dfsg-6.1 (bug #762745)
        - italc <removed>
        NOTE: 
https://github.com/newsoft/libvncserver/commit/045a044e8ae79db9244593fbce154cdf6e843273
@@ -257248,8 +257298,8 @@ CVE-2013-1393 (Cross-site scripting (XSS) 
vulnerability in the CurvyCorners modu
        NOT-FOR-US: Drupal module CurvyCorners
 CVE-2013-1392
        RESERVED
-CVE-2013-1391
-       RESERVED
+CVE-2013-1391 (Authentication bypass vulnerability in the the web interface in 
Hunt C ...)
+       TODO: check
 CVE-2013-1390
        RESERVED
 CVE-2013-1389 (Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 
11, 9. ...)
@@ -301095,8 +301145,7 @@ CVE-2010-1675 (bgpd in Quagga before 0.99.18 allows 
remote attackers to cause a
 CVE-2010-1674 (The extended-community parser in bgpd in Quagga before 0.99.18 
allows  ...)
        {DSA-2197-1}
        - quagga 0.99.18-1
-CVE-2010-1673 [ikiwiki xss due to insufficient html scrubbing]
-       RESERVED
+CVE-2010-1673 (A cross-site scripting (XSS) vulnerability in ikiwiki before 
3.2010111 ...)
        - ikiwiki 3.20101112
        [squeeze] - ikiwiki 3.20100815.2
        [lenny] - ikiwiki <not-affected>
@@ -303312,8 +303361,7 @@ CVE-2007-6733 (The nfs_lock function in fs/nfs/file.c 
in the Linux kernel 2.6.9
 CVE-2010-1195 (Cross-site scripting (XSS) vulnerability in the htmlscrubber 
component ...)
        {DSA-2020-1}
        - ikiwiki 3.20100312 (low)
-CVE-2010-0747 [linux-2.6 drbd connector issue]
-       RESERVED
+CVE-2010-0747 (drbd8 allows local users to bypass intended restrictions for 
certain a ...)
        {DSA-2015-1}
        - linux-2.6 <not-affected> (drbd introduced for the first time in 
2.6.32-12, which included the fix for this issue, so no supported debian kernel 
was ever affected)
        - drbd8 2:8.3.7-1
@@ -304004,11 +304052,9 @@ CVE-2010-1144
 CVE-2010-0750 (pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local 
users t ...)
        - policykit-1 <not-affected> (pkexec introduced in 0.92)
        [lenny] - policykit-1 <not-affected> (pkexec introduced in 0.92)
-CVE-2010-0749
-       RESERVED
+CVE-2010-0749 (Transmission before 1.92 allows attackers to prevent download 
of a fil ...)
        - transmission 1.92-1 (unimportant; bug #574507)
-CVE-2010-0748 [transmission magnet links parser buffer overflow]
-       RESERVED
+CVE-2010-0748 (Transmission before 1.92 allows an attacker to cause a denial 
of servi ...)
        - transmission 1.92-1 (medium; bug #574507)
        [lenny] - transmission <not-affected> (Support for Magnet links not yet 
available)
 CVE-2010-0746 (Directory traversal vulnerability in DeviceKit-disks in 
DeviceKit, as  ...)
@@ -304043,8 +304089,7 @@ CVE-2010-0739 (Integer overflow in the predospecial 
function in dospecial.c in d
        [lenny] - texlive-bin 2007.dfsg.2-4+lenny3
 CVE-2010-0738 (The JMX-Console web application in JBossAs in Red Hat JBoss 
Enterprise ...)
        - jbossas4 <not-affected> (Only builds a few libraries, not the full 
application server, #581226)
-CVE-2010-0737
-       RESERVED
+CVE-2010-0737 (A missing permission check was found in The CLI in JBoss 
Operations Ne ...)
        NOT-FOR-US: JBoss Operations Network
 CVE-2010-0736 (Cross-site scripting (XSS) vulnerability in the view_queryform 
functio ...)
        - viewvc 1.1.5-1 (bug #575787)
@@ -305015,8 +305060,7 @@ CVE-2010-0400 (SQL injection vulnerability in 
lib/user.php in mahara 1.0.4 allow
        - mahara 1.2.4-1 (medium)
 CVE-2010-0399
        RESERVED
-CVE-2010-0398 [autokey arbitrary file overwriting via symlinks]
-       RESERVED
+CVE-2010-0398 (The init script in autokey before 0.61.3-2 allows local 
attackers to w ...)
        - autokey 0.61.3-2
 CVE-2010-0397 (The xmlrpc extension in PHP 5.3.1 does not properly handle a 
missing m ...)
        {DSA-2018-1}
@@ -305666,16 +305710,14 @@ CVE-2010-0209 (Adobe Flash Player before 9.0.280 
and 10.x before 10.1.82.76, and
        NOT-FOR-US: Adobe Flash Plugin
 CVE-2010-0208
        RESERVED
-CVE-2010-0207 [xpdf: XRef table parsing infinite loop]
-       RESERVED
+CVE-2010-0207 (In xpdf, the xref table contains an infinite loop which allows 
remote  ...)
        - kdegraphics 4:4.0.0-1 (unimportant)
        - xpdf <unfixed> (unimportant)
        - poppler 0.16.3-1 (unimportant)
        [squeeze] - poppler 0.12.4-1.2+squeeze1
        NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=28172
        NOTE: Just a crasher, not treated as a security issue
-CVE-2010-0206 [xpdf: Invalid pointer dereference by processing JBIG2 PDF 
stream objects]
-       RESERVED
+CVE-2010-0206 (xpdf allows remote attackers to cause a denial of service (NULL 
pointe ...)
        - kdegraphics 4:4.0.0-1 (unimportant)
        - xpdf <unfixed>  (unimportant)
        - poppler 0.16.3-1 (unimportant)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/99adbddc0a18c73cb350712d6b6fe068f42dc3b8

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/99adbddc0a18c73cb350712d6b6fe068f42dc3b8
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to