about summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--REUSE.toml3
-rw-r--r--bugs/README.md18
-rw-r--r--bugs/cve/2017/14939/heapoverflowbin0 -> 30824 bytes
-rw-r--r--bugs/cve/2017/14940/nullderefbin0 -> 31248 bytes
-rw-r--r--bugs/cve/2017/15938/invalidreadbin0 -> 31248 bytes
5 files changed, 21 insertions, 0 deletions
diff --git a/REUSE.toml b/REUSE.toml
index d17b691..803a0e5 100644
--- a/REUSE.toml
+++ b/REUSE.toml
@@ -65,8 +65,11 @@ path = [ 'bugs/cve/2016/8691/11.crash',
          'bugs/cve/2017/7599/outside-short.tiff',
          'bugs/cve/2017/7600/outside-unsigned-char.tiff',
          'bugs/cve/2017/7601/shift-long.tiff',
+         'bugs/cve/2017/14939/heapoverflow',
+         'bugs/cve/2017/14940/nullderef',
          'bugs/cve/2017/15020/reproducer',
          'bugs/cve/2017/15025/3899.crashes.bin',
+         'bugs/cve/2017/15938/invalidread',
          'bugs/maptools/2633/heapoverflow.tiff' ]
 SPDX-FileCopyrightText = 'Agostino Sarubbo'
 SPDX-License-Identifier = 'CC0-1.0'
diff --git a/bugs/README.md b/bugs/README.md
index d0672d1..22c9af7 100644
--- a/bugs/README.md
+++ b/bugs/README.md
@@ -12,6 +12,16 @@
       guix shell binutils@2.29
       objdump -d cve/2017/14745/crash_1
 
+- CVE-2017-14939: [heap buffer overflow][sourceware-22169]
+
+      guix shell binutils-with-asan@2.29
+      nm -l cve/2017/14939/heapoverflow
+
+- CVE-2017-14940: [null pointer dereference][sourceware-22167]
+
+      guix shell binutils@2.29
+      nm -l cve/2017/14940/nullderef
+
 - CVE-2017-15020: [heap buffer overflow][sourceware-22202]
 
       guix shell binutils-with-asan@2.29
@@ -24,6 +34,11 @@
       nm -l cve/2017/15025/floatexception.elf
       objdump -S cve/2017/15025/floatexception.elf
 
+- CVE-2017-15938: [invalid memory read][sourceware-22209]
+
+      guix shell binutils-with-asan@2.29
+      nm -l cve/2017/15938/invalidread
+
 - CVE-2018-10372: [heap buffer overflow][sourceware-23064]
 
       guix shell binutils-with-asan@2.30
@@ -311,7 +326,10 @@
 [redhat-1319503]: https://bugzilla.redhat.com/show_bug.cgi?id=1319503
 [sourceware-21137]: https://sourceware.org/bugzilla/show_bug.cgi?id=21137
 [sourceware-22148]: https://sourceware.org/bugzilla/show_bug.cgi?id=22148
+[sourceware-22167]: https://sourceware.org/bugzilla/show_bug.cgi?id=22167
+[sourceware-22169]: https://sourceware.org/bugzilla/show_bug.cgi?id=22169
 [sourceware-22186]: https://sourceware.org/bugzilla/show_bug.cgi?id=22186
 [sourceware-22202]: https://sourceware.org/bugzilla/show_bug.cgi?id=22202
+[sourceware-22209]: https://sourceware.org/bugzilla/show_bug.cgi?id=22209
 [sourceware-23064]: https://sourceware.org/bugzilla/show_bug.cgi?id=23064
 [sourceware-24243]: https://sourceware.org/bugzilla/show_bug.cgi?id=24243
diff --git a/bugs/cve/2017/14939/heapoverflow b/bugs/cve/2017/14939/heapoverflow
new file mode 100644
index 0000000..2096d90
--- /dev/null
+++ b/bugs/cve/2017/14939/heapoverflow
Binary files differdiff --git a/bugs/cve/2017/14940/nullderef b/bugs/cve/2017/14940/nullderef
new file mode 100644
index 0000000..a793698
--- /dev/null
+++ b/bugs/cve/2017/14940/nullderef
Binary files differdiff --git a/bugs/cve/2017/15938/invalidread b/bugs/cve/2017/15938/invalidread
new file mode 100644
index 0000000..23c1305
--- /dev/null
+++ b/bugs/cve/2017/15938/invalidread
Binary files differ