PT-2018-9234
CVE-2018-1000047
·
Published
2018-02-09
·
Updated
2018-03-01
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
NASA Kodiak version v1.0
Description:
The issue is related to a data processing function in the Kodiak library, which can lead to remote code execution. This can be exploited when a victim opens an untrusted file for optimization using the Kodiak library.
Recommendations:
For NASA Kodiak version v1.0, consider avoiding the use of the data processing function in the Kodiak library until a fix is available, and refrain from opening untrusted files for optimization to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾