svn commit: r474697 - head/security/vuxml

Sun Jul 15 15:17:46 UTC 2018

Author: fernape
Date: Sun Jul 15 15:17:44 2018
New Revision: 474697
URL: https://svnweb.freebsd.org/changeset/ports/474697

Log:
  security/vuxml: add entry for devel/upp
  
  Affected by CVE-2018-874
  
  PR:	227414
  Reported by:	lightside at gmx.com
  Approved by:	tcberner (mentor)
  Differential Revision:	https://reviews.freebsd.org/D16017

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================

--- head/security/vuxml/vuln.xml	Sun Jul 15 15:13:15 2018	(r474696)
+++ head/security/vuxml/vuln.xml	Sun Jul 15 15:17:44 2018	(r474697)
@@ -460,6 +460,34 @@ ed by aCaB.</li>
     </dates>
   </vuln>
 
+  <vuln vid="c1630aa3-7970-11e8-8634-dcfe074bd614">
+    <topic>SQLite -- Corrupt DB can cause a NULL pointer dereference</topic>
+    <affects>
+      <package>
+	<name>upp</name>
+	<range><le>11540</le></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>MITRE reports:</p>
+	<blockquote cite="https://nvd.nist.gov/vuln/detail/CVE-2018-8740">
+	  <p>SQLite databases whose schema is corrupted using a CREATE TABLE AS
+	  statement could cause a NULL pointer dereference, related to build.c
+	  and prepare.c.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <cvename>CVE-2018-8740</cvename>
+      <url>http://openwall.com/lists/oss-security/2018/03/17/1</url>
+    </references>
+    <dates>
+      <discovery>2018-03-16</discovery>
+      <entry>2018-07-01</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="cd81806c-26e7-4d4a-8425-02724a2f48af">
     <topic>mozilla -- multiple vulnerabilities</topic>
     <affects>
