Remote Code Execution Vulnerability in NASA Singledop Weather Data Library
CVE-2018-1000045

7.8HIGH

Key Information:

Vendor

Nasa

Status
Singledop
Vendor
CVE Published:
9 February 2018

What is CVE-2018-1000045?

The NASA Singledop library version v1.0 exhibits a vulnerability that may allow an attacker to execute arbitrary code on a victim's system. This occurs when a user opens a specially crafted radar data file, which leads to deserialization issues being exploited. This flaw has been addressed in version v1.1 of the Singledop library.

References

https://github.com/nasa/SingleDop/pull/19
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-1000045 : Remote Code Execution Vulnerability in NASA Singledop Weather Data Library