This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-7602 →
UBUNTU-CVE-2018-7602
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple a...
Original description
The description as published by the source.
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Ubuntu:Pro:14.04:LTS
drupal7
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.26-1ubuntu0.1+esm1"}]}]
Ubuntu:Pro:16.04:LTS
drupal7
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.44-1ubuntu1~16.04.0+esm1"}]}]
References
- advisory ubuntu.com
- report ubuntu.com
- report drupal.org
- report cve.org
- report cisa.gov