Oval Definition:oval:com.ubuntu.xenial:def:201759920000000
Revision Date:2017-02-15Version:1
Title:CVE-2017-5992 on Ubuntu 16.04 LTS (xenial) - medium.
Description:Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document. It was discovered that openpyxl incorrectly handled certain documents. A remote attacker could possibly use this issue to cause a denial of service or other unspecified impact.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-5992
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND openpyxl package in xenial is affected and needs fixing.
  • BACK