Date: Wed, 11 Oct 2017 18:30:51 +0000 (UTC) From: Steve Wills <swills@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r451770 - head/security/vuxml Message-ID: <201710111830.v9BIUpor019993@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: swills Date: Wed Oct 11 18:30:51 2017 New Revision: 451770 URL: https://svnweb.freebsd.org/changeset/ports/451770 Log: Document libosip2 issue Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Wed Oct 11 18:08:53 2017 (r451769) +++ head/security/vuxml/vuln.xml Wed Oct 11 18:30:51 2017 (r451770) @@ -58,6 +58,33 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="15a62f22-098a-443b-94e2-2d26c375b993"> + <topic>osip -- Improper Restriction of Operations within the Bounds of a Memory Buffer</topic> + <affects> + <package> + <name>libosip2</name> + <range><le>5.0.0</le></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>osip developers reports:</p> + <blockquote cite="http://www.securityfocus.com/bid/97644">; + <p>In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.</p> + </blockquote> + </body> + </description> + <references> + <url>http://www.securityfocus.com/bid/97644</url>; + <url>https://savannah.gnu.org/support/index.php?109265</url>; + <cvename>CVE-2017-7853</cvename> + </references> + <dates> + <discovery>2017-04-13</discovery> + <entry>2017-10-11</entry> + </dates> + </vuln> + <vuln vid="b84dbd94-e894-4c91-b8cd-d328537b1b2b"> <topic>ncurses -- multiple issues</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201710111830.v9BIUpor019993>