[Secure-testing-commits] r46779 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-12-05 06:34:29 +0000 (Mon, 05 Dec 2016)
New Revision: 46779

Modified:
   data/CVE/list
Log:
Add libav issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list       2016-12-05 06:21:42 UTC (rev 46778)
+++ data/CVE/list       2016-12-05 06:34:29 UTC (rev 46779)
@@ -20,6 +20,38 @@
 CVE-2016-9827 [listswf: heap-based buffer overflow in _iprintf (outputtxt.c)]
        - ming <unfixed>
        NOTE: 
https://blogs.gentoo.org/ago/2016/12/01/libming-listswf-heap-based-buffer-overflow-in-_iprintf-outputtxt-c
+CVE-2016-9826
+       - libav <removed>
+       NOTE: 
https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer
+       NOTE: 
https://github.com/asarubbo/poc/blob/master/00041-libav-leftshift-ituh263dec_c
+CVE-2016-9825
+       - libav <removed>
+       NOTE: 
https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer
+       NOTE: 
https://github.com/asarubbo/poc/blob/master/00040-libav-leftshift-utils_c
+CVE-2016-9824
+       - libav <removed>
+       NOTE: 
https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer
+       NOTE: 
https://github.com/asarubbo/poc/blob/master/00039-libav-signedintoverflow-swscale_c
+CVE-2016-9823
+       - libav <removed>
+       NOTE: 
https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer
+       NOTE: 
https://github.com/asarubbo/poc/blob/master/00038-libav-uint8_t64-outofbounds-mpegvideo
+CVE-2016-9822
+       - libav <removed>
+       NOTE: 
https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer
+       NOTE: 
https://github.com/asarubbo/poc/blob/master/00037-libav-signedintoverflow-mpegvideo_parser
+CVE-2016-9821
+       - libav <removed>
+       NOTE: 
https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer
+       NOTE: 
https://github.com/asarubbo/poc/blob/master/00037-libav-signedintoverflow-mpegvideo_parser
+CVE-2016-9820
+       - libav <removed>
+       NOTE: 
https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer
+       NOTE: 
https://github.com/asarubbo/poc/blob/master/00036-libav-leftshift-mpegvideo
+CVE-2016-9819
+       - libav <removed>
+       NOTE: 
https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer
+       NOTE: 
https://github.com/asarubbo/poc/blob/master/00036-libav-leftshift-mpegvideo
 CVE-2016-9818
        - xen <unfixed>
        NOTE: https://xenbits.xen.org/xsa/advisory-201.html


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits