Oval Definition:	oval:com.ubuntu.bionic:def:20164972000
Revision Date: 2016-09-26 Version: 1 Title: CVE-2016-4972 on Ubuntu 18.04 LTS (bionic) - medium. Description: OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages. Family: unix Class: vulnerability Status: Reference(s): CVE-2016-4972 Platform(s): Ubuntu 18.04 LTS Product(s): Definition Synopsis Ubuntu 18.04 LTS (bionic) is installed. AND Package Information NOT While related to the CVE in some way, the 'murano' package in bionic is not affected (note: '1:3.0.0~b1-2'). OR NOT While related to the CVE in some way, the 'murano-dashboard' package in bionic is not affected (note: '1:2.0.0-5'). OR NOT While related to the CVE in some way, the 'python-muranoclient' package in bionic is not affected (note: '0.8.4-1').
BACK