Wind River Support Network

HomeDefectsLIN9-8659

Fixed

LIN9-8659 : Security Advisory - netdata - CVE-2018-18837

Created: Jun 19, 2019 Updated: Aug 15, 2019

Resolved Date: Jul 21, 2019

Found In Version: 9.0.0.1

Fix Version: 9.0.0.22

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2018-18837 User=admin}

CVEs

CVE-2018-18837