Executive brief
UnixAuthenticationService in Apache Ranger was updated to correctly handle user input to avoid Stack-based buffer overflow
Affected products
- Maven org.apache.ranger:ranger
Junglewise Threat Intelligence
CVE-2018-11778: UnixAuthenticationService in Apache Ranger was updated to correctly handle user input to avoid Stack-based buffer overflow
CVE-2018-11778 · Severity: low · CVSS 3 · Published 2018-10-17
Technologies: org.apache.ranger:ranger (Maven). Vendors: Maven.
Related threats
- Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apac
- Apache Ranger UI server-side request forgery in Edit Service Page
- Apache Ranger has Stored Cross-site Scripting vulnerability in Edit Service Page
- Apache Ranger code execution vulnerability in policy expressions
- Apache Ranger Cross-site Scripting vulnerability