exploitDog

CVE-2018-1000047

Опубликовано: 09 фев. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result in remote code execution. This attack appear to be exploitable via Victim opens an untrusted file for optimization using Kodiak library.

Ссылки

https://github.com/nasa/Kodiak/issues/5
Issue Tracking
Third Party Advisory
https://github.com/nasa/Kodiak/issues/5
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nasa:kodiak:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00919

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-502

Связанные уязвимости

GHSA-gfgp-v7gp-qfcj

CVSS3: 8.8

github

больше 3 лет назад

NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result in remote code execution. This attack appear to be exploitable via Victim opens an untrusted file for optimization using Kodiak library.

EPSS

Процентиль: 76%

0.00919

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-502