Описание
scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 2.17.9ubuntu0.1 |
| bionic | released | 2.17.12ubuntu1.1 |
| devel | released | 2.18.3ubuntu2 |
| esm-infra-legacy/trusty | not-affected | code not present |
| esm-infra-legacy/xenial | not-affected | code not present |
| esm-infra/bionic | released | 2.17.12ubuntu1.1 |
| esm-infra/xenial | not-affected | code not present |
| precise/esm | not-affected | code not present |
| trusty | not-affected | code not present |
| trusty/esm | not-affected | code not present |
Показывать по
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.
scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows cod ...
scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.
ALT-PU-2018-2624: package `devscripts` update to version 2.18.7-alt1_1
7.5 High
CVSS2
9.8 Critical
CVSS3