Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
27a8d663 by Salvatore Bonaccorso at 2023-11-28T09:32:36+01:00
Add new busybox issues (need further triage)
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -67,13 +67,17 @@ CVE-2023-46355 (In the module "CSV Feeds PRO" (csvfeeds) <
2.6.1 from Bl Modules
CVE-2023-46349 (In the module "Product Catalog (CSV, Excel) Export/Update"
(updateprod ...)
TODO: check
CVE-2023-42366 (A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in
the next_ ...)
- TODO: check
+ - busybox <unfixed>
+ NOTE: https://bugs.busybox.net/show_bug.cgi?id=15874
CVE-2023-42365 (A use-after-free vulnerability was discovered in BusyBox
v.1.36.1 via ...)
- TODO: check
+ - busybox <unfixed>
+ NOTE: https://bugs.busybox.net/show_bug.cgi?id=15871
CVE-2023-42364 (A use-after-free vulnerability in BusyBox v.1.36.1 allows
attackers to ...)
- TODO: check
+ - busybox <unfixed>
+ NOTE: https://bugs.busybox.net/show_bug.cgi?id=15868
CVE-2023-42363 (A use-after-free vulnerability was discovered in xasprintf
function in ...)
- TODO: check
+ - busybox <unfixed>
+ NOTE: https://bugs.busybox.net/show_bug.cgi?id=15865
CVE-2023-3545 (Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in
Chamilo ...)
TODO: check
CVE-2023-3533 (Path traversal in file upload functionality in
`/main/webservices/addi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27a8d66313905b240bd23867073a0718a7011bef
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27a8d66313905b240bd23867073a0718a7011bef
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
