kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

* Add libevhtp to list of vulnerable ports.

Browse source 
Libevhtp prior to 1.2.14 uses oniguruma 5.9.2 and is
vulnerable if using the REGEX option, which is the
default.
This commit is contained in:
Richard Gallamore 2018-01-04 19:08:49 +00:00
parent 2c91ba6c3c
commit 5235b5b994
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=458042
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
security/vuxml/vuln.xml
View file

@ -6759,6 +6759,10 @@ Notes:
<vuln vid="b396cf6c-62e6-11e7-9def-b499baebfeaf">
<topic>oniguruma -- multiple vulnerabilities</topic>
<affects>
<package>
<name>libevhtp</name>
<range><lt>1.2.14</lt></range>
</package>
<package>
<name>oniguruma4</name>
<range><lt>4.7.2</lt></range>