oss-security - Re: CVE assignments for Wireshark

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1428885404.213777.1296484373924.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 31 Jan 2011 09:32:53 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE assignments for Wireshark

----- Original Message -----
> On 01/13/2011 04:21 AM, Steven M. Christey wrote:
> >
> > CVE-2011-0444 - MAC-LTE
> >
> > CVE-2011-0445 - ASN.1 BER
> 
> Looking at the following wireshark bug and the relevant commits:
> 
> https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5530
> 
> http://anonsvn.wireshark.org/viewvc?view=rev&revision=35292
> http://anonsvn.wireshark.org/viewvc?view=rev&revision=35298
> 
> It seems that there are two issues here, buffer overflow in MAC-LTE
> dissector as well as buffer overflow in SNMP engineID preferences.
> 
> This issue was however assigned only one CVE i.e. CVE-2011-0444.
> Do you think two CVEs (for each individual issues), should be assigned
> in this case?
> 

Hi Steve,

Can MITRE handle this one?

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.