Skip to content

Commit 8bf1368

Browse files
authored
Disclose CVE-2023-5841 (#171)
* Add CVE-2023-5841 Signed-off-by: Tod Beardsley <todb@packetfu.com> * Unrelated typo fix Signed-off-by: Tod Beardsley <todb@packetfu.com> * Fix CVE titles Signed-off-by: Tod Beardsley <todb@packetfu.com> * Update dates and timeline Signed-off-by: Tod Beardsley <todb@packetfu.com> * Remove timeline boilerplate Signed-off-by: Tod Beardsley <todb@packetfu.com> --------- Signed-off-by: Tod Beardsley <todb@packetfu.com>
1 parent 66508df commit 8bf1368

File tree

3 files changed

+416
-5
lines changed

3 files changed

+416
-5
lines changed

cve.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ For issues involving other parties, please see additional requirements, below. N
9494
* Ask a CVE point of contact for a CVE ID reservation.
9595
- Merely reserving a CVE ID number in no way alters the usual AHA! embargo on material presented at AHA!
9696
* Agree to abide by the the above VDP terms and conditions for publishing.
97-
- Failing to adehere to the VDP may result in expulsion from AHA!
97+
- Failing to adhere to the VDP may result in expulsion from AHA!
9898

9999
<br/>
100100

@@ -110,14 +110,15 @@ When we publish CVEs, we will tend to use this [template], adjusted to taste.
110110
| [CVE-2023-2905] | 0x00c8 | **Cesanta Mongoose MQTT Message Parsing Heap Overflow** |
111111
| [CVE-2023-2906] | 0x00c8 | **Wireshark CP2179 divide by zero** |
112112
| [CVE-2023-4504] | 0x00c9 | **CUPS/libppd PostScript Parsing Heap Overflow** |
113+
| [CVE-2023-5841] | 0x00cd | **OpenEXR Heap Overflow in Scanline Deep Data Parsing** |
113114

114115
## Reserved CVEs
115116

116117
We've reserved the following CVEs for upcoming publication.
117118

118-
| CVE | Meeting |
119-
| ------------- | --------- |
120-
| CVE-2023-5841 | 0x00cd |
119+
| CVE | Meeting |
120+
| --------------- | --------- |
121+
| None right now! | 0x00xx |
121122

122123
### Contact
123124

@@ -139,3 +140,4 @@ Vulnerabilities involving other parties must be either (1) presented at a regula
139140
[CVE-2023-2905]: /cves/CVE-2023-2905.html
140141
[CVE-2023-2906]: /cves/CVE-2023-2906.html
141142
[CVE-2023-4504]: /cves/CVE-2023-4504.html
143+
[CVE-2023-5841]: /cves/CVE-2023-5841.html

cves/CVE-2023-4504.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
layout: default
3-
title: cve-template
3+
title: CVE-2023-4504
44
categories: nav
55
showinnav: false
66
---

0 commit comments

Comments
 (0)