D14395.id39367.diff
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

D14395.id39367.diff
View Options

	Index: security/vuxml/vuln.xml
	===================================================================
	--- security/vuxml/vuln.xml
	+++ security/vuxml/vuln.xml
	@@ -58,6 +58,31 @@
	* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
	-->
	<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
	+ <vuln vid="044cff62-ed8b-4e72-b102-18a7d58a669f">
	+ <topic>bro -- integer overflow allows remote DOS</topic>
	+ <affects>
	+ <package>
	+ <name>bro</name>
	+ <range><lt>2.5.3</lt></range>
	+ </package>
	+ </affects>
	+ <description>
	+ <body xmlns="http://www.w3.org/1999/xhtml">
	+ <p>Philippe Antoine of Catena cyber:</p>
	+ <blockquote cite="http://blog.bro.org/2018/02/bro-253-released-security-update.html">
	+ <p>This is a security release that fixes an integer overflow in code generated by binpac. This issue can be used by remote attackers to crash Bro (i.e. a DoS attack). There also is a possibility this can be exploited in other ways. (CVE pending.)</p>
	+ </blockquote>
	+ </body>
	+ </description>
	+ <references>
	+ <url>http://blog.bro.org/2018/02/bro-253-released-security-update.html</url>
	+ </references>
	+ <dates>
	+ <discovery>2018-02-14</discovery>
	+ <entry>2018-02-16</entry>
	+ </dates>
	+ </vuln>
	+
	<vuln vid="746d04dc-507e-4450-911f-4c41e48bb07a">
	<topic>bro -- out of bounds write allows remote DOS</topic>
	<affects>