Oval Definition:oval:com.ubuntu.xenial:def:20185704000
Revision Date:2018-01-16Version:1
Title:CVE-2018-5704 on Ubuntu 16.04 LTS (xenial) - medium.
Description:Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-5704
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND The 'openocd' package in xenial was vulnerable but has been fixed (note: '0.9.0-1+deb8u1build0.16.04.1').
    • BACK