CVE-2018-12479 — Request controller allows to create requests with arbitrary request IDs

CVE-2018-12479

Request controller allows to create requests with arbitrary request IDs PUBLISHED

Description (CNA)

A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are openSUSE Open Build Service: versions prior to 01b015ca2a320afc4fae823465d1e72da8bd60df.

Affected (CNA)

Vendor / product	Versions
openSUSE / Open Build Service	affected unspecified before 01b015ca2a320afc4fae823465d1e72da8bd60df

CWE

CWE-20

References

https://bugzilla.suse.com/show_bug.cgi?id=1108435

ADP enrichment

CVE

No English description supplied.

https://bugzilla.suse.com/show_bug.cgi?id=1108435