CVE-2018-1000045: High severity nasa singledop vulnerability

Published Feb 9, 2018

Updated

NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library (Weather data) that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1.

Affected Software

1 affected component

nasa Singledop=1.0

Remediation

Patch Available

https://github.com/nasa/SingleDop/pull/19

Event History

Feb 9, 2018

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the vulnerability ID of this NASA Singledop version v1.0 vulnerability?

The vulnerability ID is CVE-2018-1000045.

What is the severity of CVE-2018-1000045?

The severity of CVE-2018-1000045 is high with a severity value of 7.8 out of 10.

What is the affected software of CVE-2018-1000045?

The affected software is NASA Singledop version 1.0.

What is the CWE of CVE-2018-1000045?

The CWE of CVE-2018-1000045 is 502.

How can the vulnerability in NASA Singledop version v1.0 be exploited?

The vulnerability in NASA Singledop version v1.0 can be exploited by opening a specially crafted radar data file.

Has the vulnerability in NASA Singledop version v1.0 been fixed?

Yes, the vulnerability in NASA Singledop version v1.0 has been fixed in version 1.1.

Where can I find more information about the fix for CVE-2018-1000045?

You can find more information about the fix for CVE-2018-1000045 at the following link: [GitHub Pull Request](https://github.com/nasa/SingleDop/pull/19)