Cette page suit l'état du correctif pour Ubuntu. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-7602 →

UBUNTU-CVE-2018-7602

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple a...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Ubuntu:Pro:14.04:LTS drupal7

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.26-1ubuntu0.1+esm1"}]}]

Ubuntu:Pro:16.04:LTS drupal7

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.44-1ubuntu1~16.04.0+esm1"}]}]

Références

advisory ubuntu.com
report ubuntu.com
report drupal.org
report cve.org
report cisa.gov