CVE-2017-1002157

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - patrick@puiterwijk.org

Published

2019-01-10

Last modified

2024-09-16

Weaknesses

CWE-20, CWE-242

Affected products

• Modulemd (Fedora Modularity)
• Modulemd (Redhat)

References

• https://pagure.io/modulemd/issue/55