Lucene search

FedoraCVELIST:CVE-2017-1002157

HistoryOct 03, 2022 - 4:22 p.m.

CVE-2017-1002157

2022-10-0316:22:52

CWE-242

fedora

www.cve.org

modulemd 1.3.1 unsafe function

remote code execution

cve-2017-1002157

9.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.5%

JSON

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.

CNA Affected

[
  {
    "product": "modulemd",
    "vendor": "Fedora Modularity",
    "versions": [
      {
        "lessThanOrEqual": "1.3.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

pagure.io/modulemd/issue/55