Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
cf7a43db by Salvatore Bonaccorso at 2024-01-21T17:06:40+01:00
Add Debian bug reference for edk2 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -986,39 +986,39 @@ CVE-2023-2655 (The Contact Form by WD WordPress plugin 
through 1.13.23 does not
 CVE-2021-4432 (A vulnerability was found in PCMan FTP Server 2.0.7. It has 
been class ...)
        NOT-FOR-US: PCMan FTP Server
 CVE-2023-45237 (EDK2's Network Package is susceptible to a predictable TCP 
Initial Seq ...)
-       - edk2 <unfixed>
+       - edk2 <unfixed> (bug #1061256)
        NOTE: 
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
        NOTE: https://www.openwall.com/lists/oss-security/2024/01/16/2
 CVE-2023-45236 (EDK2's Network Package is susceptible to a predictable TCP 
Initial Seq ...)
-       - edk2 <unfixed>
+       - edk2 <unfixed> (bug #1061256)
        NOTE: 
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
        NOTE: https://www.openwall.com/lists/oss-security/2024/01/16/2
 CVE-2023-45235 (EDK2's Network Package is susceptible to a buffer overflow 
vulnerabili ...)
-       - edk2 <unfixed>
+       - edk2 <unfixed> (bug #1061256)
        NOTE: 
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
        NOTE: https://www.openwall.com/lists/oss-security/2024/01/16/2
 CVE-2023-45234 (EDK2's Network Package is susceptible to a buffer overflow 
vulnerabili ...)
-       - edk2 <unfixed>
+       - edk2 <unfixed> (bug #1061256)
        NOTE: 
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
        NOTE: https://www.openwall.com/lists/oss-security/2024/01/16/2
 CVE-2023-45233 (EDK2's Network Package is susceptible to an infinite lop 
vulnerability ...)
-       - edk2 <unfixed>
+       - edk2 <unfixed> (bug #1061256)
        NOTE: 
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
        NOTE: https://www.openwall.com/lists/oss-security/2024/01/16/2
 CVE-2023-45232 (EDK2's Network Package is susceptible to an infinite loop 
vulnerabilit ...)
-       - edk2 <unfixed>
+       - edk2 <unfixed> (bug #1061256)
        NOTE: 
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
        NOTE: https://www.openwall.com/lists/oss-security/2024/01/16/2
 CVE-2023-45231 (EDK2's Network Package is susceptible to an out-of-bounds read 
 vulner ...)
-       - edk2 <unfixed>
+       - edk2 <unfixed> (bug #1061256)
        NOTE: 
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
        NOTE: https://www.openwall.com/lists/oss-security/2024/01/16/2
 CVE-2023-45230 (EDK2's Network Package is susceptible to a buffer overflow 
vulnerabili ...)
-       - edk2 <unfixed>
+       - edk2 <unfixed> (bug #1061256)
        NOTE: 
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
        NOTE: https://www.openwall.com/lists/oss-security/2024/01/16/2
 CVE-2023-45229 (EDK2's Network Package is susceptible to an out-of-bounds read 
 vulner ...)
-       - edk2 <unfixed>
+       - edk2 <unfixed> (bug #1061256)
        NOTE: 
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
        NOTE: https://www.openwall.com/lists/oss-security/2024/01/16/2
 CVE-2023-6395 (The Mock software contains a vulnerability wherein an attacker 
could p ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf7a43dbd8658f741630ff9078c05d90dc93b43f

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf7a43dbd8658f741630ff9078c05d90dc93b43f
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to