CVE-2016-9794 and CVE-2019-19057

[RKR21]

creating pull request for both CVEs

[Amritpaul98]

2016 yml: reported date:

• According to https://bugzilla.redhat.com/show_bug.cgi?id=1401494 it was reported in 2016-12-05, double check the date it was reported.

Specifications:

• Elaborate your answer a bit more and mention the artifacts you went through to get to this conclusion.

mistakes:

• It is a good short description but try to rewrite it in a more simpler terms like "The initial resolution involved rearranging the order of operations, specifically by relocating the command that releases the audio stream."
• Also specify what functions were at play here according to this commit https://github.com/torvalds/linux/commit/3aa02cb664c5fb1042958c8d1aa8c35055a2ebc4

CWE:

• 2 CWE are involved in this CWE-362 and CWE-416, double check this information on NVD.
• put "Manually confirmed" after confirming it.

I will give 4 upvotes to CVE-2016-9794.

[vutuhu]

CVE-2019-19057 This bug may be related: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19057 May need to double check reported date and the person who found the issue.

[vutuhu]

I give 3 upvotes for CVE-2016-9794 and 2 for CVE-2019-19057

[BasketOfEggs]

The CWE designations need to be double checked to ensure that they are correct, and then the note needs to be changed to "Manually Confirmed" or a description about why this CWE applies.

[BasketOfEggs]

Your descriptions were well-written and helped me to understand what each vulnerability was 4 upvotes to CVE-2016 and 2 upvotes to CVE-2019