aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authordelphij <delphij@FreeBSD.org>2011-08-27 02:10:39 +0800
committerdelphij <delphij@FreeBSD.org>2011-08-27 02:10:39 +0800
commit934a4056e76839bdfde668383f1825eefef6d341 (patch)
tree3341ca3a40510e713c3aecf772bae875779ad2f7 /security
parent7912d25350f8fe7efc31e1aac7749693ed983a36 (diff)
downloadfreebsd-ports-gnome-934a4056e76839bdfde668383f1825eefef6d341.tar.gz
freebsd-ports-gnome-934a4056e76839bdfde668383f1825eefef6d341.tar.zst
freebsd-ports-gnome-934a4056e76839bdfde668383f1825eefef6d341.zip
Document stunnel heap corruption vulnerability.
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml29
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index b3bec9db3f1d..6f8aa9396ec2 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -34,6 +34,35 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="cdeb34e6-d00d-11e0-987e-00215c6a37bb">
+ <topic>stunnel -- heap corruption vulnerability</topic>
+ <affects>
+ <package>
+ <name>stunnel</name>
+ <range><lt>4.42</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Michal Trojnara reports:</p>
+ <blockquote cite="http://www.stunnel.org/pipermail/stunnel-announce/2011-August/000059.html">
+ <p>Version 4.42, 2011.08.18, urgency: HIGH:</p>
+ <p>Fixed a heap corruption vulnerability in versions
+ 4.40 and 4.41. It may possibly be leveraged to
+ perform DoS or remote code execution attacks.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <bid>49254</bid>
+ <cvename>CVE-2011-2940</cvename>
+ </references>
+ <dates>
+ <discovery>2011-08-25</discovery>
+ <entry>2011-08-26</entry>
+ </dates>
+ </vuln>
+
<vuln vid="75e26236-ce9e-11e0-b26a-00215c6a37bb">
<topic>phpmyadmin -- multiple XSS vulnerabilities</topic>
<affects>