opensuse open-build-service CVE-2018-12479 is a vulnerability in OpenSuse Open Build Service
Published on October 9, 2018

Request controller allows to create requests with arbitrary request IDs
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are openSUSE Open Build Service: versions prior to 01b015ca2a320afc4fae823465d1e72da8bd60df.

NVD

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.


Products Associated with CVE-2018-12479

Want to know whenever a new CVE is published for OpenSuse Open Build Service? stack.watch will email you.

 

Affected Versions

openSUSE Open Build Service:

Exploit Probability

EPSS
0.49%
Percentile
64.98%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.