CVE-2018-20710 - OpenCVE

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6285. Reason: This candidate is a duplicate of CVE-2019-6285. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2019-6285 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2018-20710
https://www.cve.org/CVERecord?id=CVE-2018-20710

History

No history.

MITRE

Status: REJECTED

Assigner: mitre

Published: 2019-03-07T22:00:00

Updated: 2019-04-15T17:46:17

Reserved: 2019-01-14T00:00:00

Link: CVE-2018-20710

Vulnrichment

No data.

NVD

Status : Rejected

Published: 2019-03-07T23:29:01.500

Modified: 2023-11-07T02:56:20.353

Link: CVE-2018-20710

Redhat

Severity :

Publid Date: 2019-01-14T00:00:00Z

Links: CVE-2018-20710 - Bugzilla

{"bugzilla": {"description": "yaml-cpp: remote dos via crafted YAML file in function SingleDocParser::HandleFlowSequence", "id": "1686723", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1686723"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-400", "details": ["This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6285. Reason: This candidate is a duplicate of CVE-2019-6285. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2019-6285 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"], "name": "CVE-2018-20710", "package_state": [{"cpe": "cpe:/a:redhat:openstack:10", "fix_state": "Not affected", "package_name": "yaml-cpp", "product_name": "Red Hat OpenStack Platform 10 (Newton)"}, {"cpe": "cpe:/a:redhat:openstack:13", "fix_state": "Not affected", "package_name": "yaml-cpp", "product_name": "Red Hat OpenStack Platform 13 (Queens)"}, {"cpe": "cpe:/a:redhat:openstack:14", "fix_state": "Not affected", "package_name": "yaml-cpp", "product_name": "Red Hat OpenStack Platform 14 (Rocky)"}, {"cpe": "cpe:/a:redhat:openstack:8", "fix_state": "Not affected", "package_name": "yaml-cpp", "product_name": "Red Hat OpenStack Platform 8 (Liberty)"}, {"cpe": "cpe:/a:redhat:openstack:9", "fix_state": "Not affected", "package_name": "yaml-cpp", "product_name": "Red Hat OpenStack Platform 9 (Mitaka)"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "yaml-cpp", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Not affected", "package_name": "rh-mongodb32-yaml-cpp", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Not affected", "package_name": "rh-mongodb34-yaml-cpp", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Not affected", "package_name": "rh-mongodb36-yaml-cpp", "product_name": "Red Hat Software Collections"}], "public_date": "2019-01-14T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2018-20710\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-20710"], "statement": "This flaw was found to be a duplicate of CVE-2019-6285. Please see https://access.redhat.com/security/cve/CVE-2019-6285 for information about affected products and security errata."}