CVE-2019-1010011

[carnil]

Hi

Recently there was a CVE assigned, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010011 with two references:

• https://drive.google.com/drive/folders/1nAL-B_I5Y7SKX0AeIurGkTzNHMazoyzP?usp=sharing
• https://drive.google.com/drive/folders/1xiVrcB1lTE_mSd_mL7akjpscH4CUahYU?usp=sharing

Did you got a notice on it? Was this already fixed? (any reference to share?)

[moinejf]

I did not get any notification about this CVE.
The two associated references deal with already fixed bugs:

• stack-buffer-overflow music.c:5085 in delayed_output(float indent) #16 (CVE-2018-10753 created by yourself)
• stack-buffer-overflow parse.c:4081 in get_key(struct SYMBOL *s) #17 (CVE-2018-10771 created by https://github.com/c1208828)

[carnil]

On Tue, Jul 16, 2019 at 04:56:17AM -0700, Jean-François Moine wrote: I did not get any notification about this CVE. The two associated references deal with already fixed bugs: - #16 (CVE-2018-10753 created by yourself) - #17 (CVE-2018-10771 created by https://github.com/c1208828)

Thanks for confirming this. So this means CVE-2019-1010011 can be considered probably as duplicate assignment. I will notify MITRE to let them know about the problem.