diff --git a/2017/17xxx/CVE-2017-17724.json b/2017/17xxx/CVE-2017-17724.json index 67b045020cb..8d853f044c2 100644 --- a/2017/17xxx/CVE-2017-17724.json +++ b/2017/17xxx/CVE-2017-17724.json @@ -34,7 +34,7 @@ "description_data" : [ { "lang" : "eng", - "value" : "In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file." + "value" : "In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the \"!= 0x1c\" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file." } ] }, @@ -56,6 +56,16 @@ "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524107", "refsource" : "MISC", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1524107" + }, + { + "name" : "https://github.com/Exiv2/exiv2/issues/263", + "refsource" : "MISC", + "url" : "https://github.com/Exiv2/exiv2/issues/263" + }, + { + "name" : "https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md", + "refsource" : "MISC", + "url" : "https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md" } ] } diff --git a/2018/9xxx/CVE-2018-9306.json b/2018/9xxx/CVE-2018-9306.json index 7a81fae899d..0770f4ec750 100644 --- a/2018/9xxx/CVE-2018-9306.json +++ b/2018/9xxx/CVE-2018-9306.json @@ -2,30 +2,7 @@ "CVE_data_meta" : { "ASSIGNER" : "cve@mitre.org", "ID" : "CVE-2018-9306", - "STATE" : "PUBLIC" - }, - "affects" : { - "vendor" : { - "vendor_data" : [ - { - "product" : { - "product_data" : [ - { - "product_name" : "n/a", - "version" : { - "version_data" : [ - { - "version_value" : "n/a" - } - ] - } - } - ] - }, - "vendor_name" : "n/a" - } - ] - } + "STATE" : "REJECT" }, "data_format" : "MITRE", "data_type" : "CVE", @@ -34,33 +11,7 @@ "description_data" : [ { "lang" : "eng", - "value" : "In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the \"!= 0x1c\" case." - } - ] - }, - "problemtype" : { - "problemtype_data" : [ - { - "description" : [ - { - "lang" : "eng", - "value" : "n/a" - } - ] - } - ] - }, - "references" : { - "reference_data" : [ - { - "name" : "https://github.com/Exiv2/exiv2/issues/263", - "refsource" : "MISC", - "url" : "https://github.com/Exiv2/exiv2/issues/263" - }, - { - "name" : "https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md", - "refsource" : "MISC", - "url" : "https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md" + "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] }