CVE-2017-1002157
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
Affected (1)
Related CWEs
CWE-20
Improper Input Validation
The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly.
CWE-242
Use of Inherently Dangerous Function
The product calls a function that can never be guaranteed to work safely.
References (2)
Timeline
No history available yet.