CVE-2018-11778: Buffer Overflow
First published: Thu Oct 04 2018(Updated: )
UnixAuthenticationService in Apache Ranger 1.2.0 was updated to correctly handle user input to avoid Stack-based buffer overflow. Versions prior to 1.2.0 should be upgraded to 1.2.0
Credit: security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache Ranger | <1.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
- https://lists.apache.org/thread.html/r04bc435a92911de4b52d2b98f169bd7cf2e8bbeb53b03788df8f932c@%3Cdev.ranger.apache.org%3E
- https://lists.apache.org/thread.html/rd88077a781ef38f7687c100f93992f4dda8aa101925050c4af470998@%3Cdev.ranger.apache.org%3E
- https://seclists.org/oss-sec/2018/q4/11
- https://lists.apache.org/thread.html/r04bc435a92911de4b52d2b98f169bd7cf2e8bbeb53b03788df8f932c%40%3Cdev.ranger.apache.org%3E
- https://lists.apache.org/thread.html/rd88077a781ef38f7687c100f93992f4dda8aa101925050c4af470998%40%3Cdev.ranger.apache.org%3E
Frequently Asked Questions
What is the severity of CVE-2018-11778?
CVE-2018-11778 has a medium severity due to its potential to cause a stack-based buffer overflow.
How do I fix CVE-2018-11778?
To fix CVE-2018-11778, upgrade your Apache Ranger installation to version 1.2.0 or later.
What software is affected by CVE-2018-11778?
CVE-2018-11778 affects Apache Ranger versions prior to 1.2.0.
What vulnerability does CVE-2018-11778 address?
CVE-2018-11778 addresses a vulnerability in the UnixAuthenticationService in Apache Ranger that could lead to a stack-based buffer overflow.
Is CVE-2018-11778 a zero-day vulnerability?
No, CVE-2018-11778 is not a zero-day vulnerability as it has a public disclosure and a patch is available.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/trending
- vendor/apache
- canonical/apache ranger