Beveiligingsadvies

CVE-2018-6331

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-12-31 23:00:00
Laatst bijgewerkt 2025-05-06 15:46:07
Toegewezen door facebook
CVSS-score 9.8
Status PUBLISHED

Beschrijving

Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01.