Wind River Support Network

HomeDefectsLIN10-4220

Not to be fixed

LIN10-4220 : Security Advisory - python-pyyaml - CVE-2017-18342

Created: Jun 29, 2018 Updated: Nov 19, 2018

Resolved Date: Nov 6, 2018

Found In Version: 10.17.41.1

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

In PyYAML before 4.1, the yaml.load() API could execute arbitrary code. In other words, yaml.safe_load is not used.

https://nvd.nist.gov/vuln/detail/CVE-2017-18342

CVEs

CVE-2017-18342