diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2017-12-29 07:20:18 +0000 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2017-12-29 07:20:18 +0000 |
| commit | 44ca3967548ab4f3d32acd0ec9bff00e70e2614c (patch) | |
| tree | 0fe45afeddb849255c569591e89907ea298825d2 /data | |
| parent | c5709c1a939f21377a63c24615d9060da3ec3345 (diff) | |
Asked MITRE (and confirmed) for rejection of CVE-2017-17496
CVE is invalid, since the respective functions having the problems are
just in dead code and unused. There is no vulnerability. The CVE is
withdrawn by MITRE itself.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@59010 e39458fd-73e7-0310-bf30-c45bca0a0e42
Diffstat (limited to 'data')
| -rw-r--r-- | data/CVE/list | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/data/CVE/list b/data/CVE/list index b927bd8df3..71765b35a5 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -6105,8 +6105,8 @@ CVE-2017-17497 (In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c al - tidy-html5 <not-affected> (Vulnerable code introduced after 5.6.0) - tidy <not-affected> (Vulnerable code not present) NOTE: https://github.com/htacg/tidy-html5/issues/656 -CVE-2017-17496 (The socket_create function in socket.c in idevicerestore through ...) - TODO: check +CVE-2017-17496 + REJECTED CVE-2017-17495 RESERVED CVE-2017-17494 |