Oval Definition:oval:com.ubuntu.cosmic:def:2017183420000000
Revision Date:2018-06-27Version:1
Title:CVE-2017-18342 on Ubuntu 18.10 (cosmic) - low.
Description:In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-18342
Platform(s):Ubuntu 18.10
Product(s):
Definition Synopsis
  • Ubuntu 18.10 (cosmic) is installed.
  • AND pyyaml: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
    • BACK