CVE-2018-13043

Опубликовано: 01 июл. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.

Ссылки

https://bugs.debian.org/902409
Patch
Vendor Advisory
https://usn.ubuntu.com/3704-1/
Third Party Advisory
https://bugs.debian.org/902409
Patch
Vendor Advisory
https://usn.ubuntu.com/3704-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:debian:devscripts:*:*:*:*:*:*:*:*

Версия до 2.18.3 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 84%

0.02438

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVE-2018-13043

CVSS3: 9.8

ubuntu

больше 8 лет назад

scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.

CVE-2018-13043

CVSS3: 9.8

debian

больше 8 лет назад

scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows cod ...

GHSA-6229-3fh2-qhp3

CVSS3: 9.8

github

больше 4 лет назад

scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.

ALT-PU-2018-2624

CVSS3: 9.8

altlinux

около 8 лет назад

ALT-PU-2018-2624: package `devscripts` update to version 2.18.7-alt1_1

EPSS

Процентиль: 84%

0.02438

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-94