NetSight
critical9.8

CVE-2018-13043

scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuratio…

Impact

scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.

Affected products

VendorProductAffected versions
DebianDevscripts
through 2.18.3
CanonicalUbuntu Linux
Versions 17.10, 18.04

Weakness classification

References