Lucene search
Veracode Vulnerability DatabaseVERACODE:8142HistoryJan 11, 2019 - 10:54 a.m.
Remote Code Execution (RCE)
2019-01-1110:54:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.004 Low
EPSS
Percentile
72.5%
modulemd is vulnerable to remote code execution (RCE). The vulnerability is possible because it is using insecure function yaml.load_all.
References
Related
nessus
nessus
Fedora 26 : modulemd (2017-94a173c491)
2017-11-07 00:00:00
Fedora 25 : modulemd (2017-8258f76154)
2017-11-07 00:00:00
Fedora 27 : modulemd (2017-cc316727f5)
2018-01-15 00:00:00
osv
osv
modulemd uses an unsafe function for processing externally provided data
2019-01-17 13:56:18
PYSEC-2019-153
2019-01-10 21:29:00
fedora
fedora
[SECURITY] Fedora 27 Update: modulemd-1.3.2-1.fc27
2017-11-11 13:48:36
[SECURITY] Fedora 26 Update: modulemd-1.3.2-1.fc26
2017-11-06 23:34:32
[SECURITY] Fedora 25 Update: modulemd-1.3.2-1.fc25
2017-11-06 23:33:55
cve
cve
CVE-2017-1002157
2022-10-03 16:22:52
github
github
modulemd uses an unsafe function for processing externally provided data
2019-01-17 13:56:18
openvas
openvas
Fedora Update for modulemd FEDORA-2017-8258f76154
2017-11-07 00:00:00
Fedora Update for modulemd FEDORA-2017-94a173c491
2017-11-07 00:00:00
prion
prion
Remote code execution
2019-01-10 21:29:00
nvd
nvd
CVE-2017-1002157
2019-01-10 21:29:00
cvelist
cvelist
CVE-2017-1002157
2022-10-03 16:22:52