Vulnerability Details CVE-2018-6331
Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2018-6331
-
cpe:2.3:a:facebook:buck:2015.09.10.01
-
cpe:2.3:a:facebook:buck:2015.09.15.01
-
cpe:2.3:a:facebook:buck:2015.09.21.01
-
cpe:2.3:a:facebook:buck:2015.09.28.01
-
cpe:2.3:a:facebook:buck:2015.10.05.01
-
cpe:2.3:a:facebook:buck:2015.10.19.01
-
cpe:2.3:a:facebook:buck:2015.10.26.01
-
cpe:2.3:a:facebook:buck:2015.11.02.01
-
cpe:2.3:a:facebook:buck:2015.11.09.01
-
cpe:2.3:a:facebook:buck:2015.11.16.01
-
cpe:2.3:a:facebook:buck:2015.11.23.01
-
cpe:2.3:a:facebook:buck:2015.11.30.01
-
cpe:2.3:a:facebook:buck:2015.12.14.01
-
cpe:2.3:a:facebook:buck:2015.12.28.01
-
cpe:2.3:a:facebook:buck:2016.01.18.01
-
cpe:2.3:a:facebook:buck:2016.01.25.01
-
cpe:2.3:a:facebook:buck:2016.02.01.01
-
cpe:2.3:a:facebook:buck:2016.02.08.01
-
cpe:2.3:a:facebook:buck:2016.02.29.01
-
cpe:2.3:a:facebook:buck:2016.03.07.01
-
cpe:2.3:a:facebook:buck:2016.03.28.01
-
cpe:2.3:a:facebook:buck:2016.04.18.01
-
cpe:2.3:a:facebook:buck:2016.09.26.01
-
cpe:2.3:a:facebook:buck:2016.11.11.01
-
cpe:2.3:a:facebook:buck:2017.03.29.01
-
cpe:2.3:a:facebook:buck:2017.05.09.01
-
cpe:2.3:a:facebook:buck:2017.05.31.01
-
cpe:2.3:a:facebook:buck:2017.09.04.02
-
cpe:2.3:a:facebook:buck:2017.10.01.01
-
cpe:2.3:a:facebook:buck:2017.11.16.01
-
cpe:2.3:a:facebook:buck:2018.02.16.01
-
cpe:2.3:a:facebook:buck:2018.03.26.01