diff options
| author | Bernard Spil <brnrd@FreeBSD.org> | 2017-01-09 13:48:19 +0000 |
|---|---|---|
| committer | Bernard Spil <brnrd@FreeBSD.org> | 2017-01-09 13:48:19 +0000 |
| commit | 536931e190ccc8d2f7fe5222ad9ff486d58b34d5 (patch) | |
| tree | 706b019006167ad0edb64689243bdebf26771bed /security | |
| parent | ab098bd99c81720d60cda2cfd86ec919865c11b9 (diff) | |
| download | freebsd-ports-536931e190ccc8d2f7fe5222ad9ff486d58b34d5.zip | |
security/vuxml: Document GnuTLS vulnerabilities
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 6bafcdd7c6f2..e4bd1a6d42da 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,41 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="0c5369fc-d671-11e6-a9a5-b499baebfeaf"> + <topic>GnuTLS -- Memory corruption vulnerabilities</topic> + <affects> + <package> + <name>gnutls</name> + <range><lt>3.5.8</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The GnuTLS project reports:</p> + <blockquote cite="http://www.gnutls.org/news.html#2017-01-09"> + <ul> + <li>It was found using the OSS-FUZZ fuzzer infrastructure that + decoding a specially crafted OpenPGP certificate could lead + to heap and stack overflows. (GNUTLS-SA-2017-2)</li> + <li>It was found using the OSS-FUZZ fuzzer infrastructure that + decoding a specially crafted X.509 certificate with Proxy + Certificate Information extension present could lead to a + double free. (GNUTLS-SA-2017-1)</li> + </ul> + </blockquote> + </body> + </description> + <references> + <url>http://www.gnutls.org/news.html#2017-01-09</url> + <url>http://www.gnutls.org/security.html#GNUTLS-SA-2017-2</url> + <url>http://www.gnutls.org/security.html#GNUTLS-SA-2017-1</url> + </references> + <dates> + <discovery>2017-01-09</discovery> + <entry>2017-01-09</entry> + </dates> + </vuln> + <vuln vid="e5ec2767-d529-11e6-ae1b-002590263bf5"> <topic>tomcat -- information disclosure vulnerability</topic> <affects> |