CVE-2017-1002157
10.01.2019, 21:29
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | modulemd | 𝑥 ≤ 1.3.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-242 - Use of Inherently Dangerous FunctionThe program calls a function that can never be guaranteed to work safely.
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.