CVE-2017-18361
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-18361
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Pylons Colander 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Pylons Colander是一款字符串、映射和列表的序列化/反序列化/验证库。 Pylons Colander 1.6及之前版本中存在输入验证漏洞，该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2017-18361
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-18361
Please Login to view more intelligence information
- https://github.com/Pylons/colander/issues/290x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2017-18361
Same Patch Batch · n/a · 2019-02-01 · 6 CVEs total
| CVE-2019-7298 | D-Link DIR-823G 操作系统命令注入漏洞 | |
| CVE-2019-7300 | Artica Proxy 命令注入漏洞 | |
| CVE-2019-7301 | ZEVENET Zen Load Balancer 命令操作系统命令注入漏洞 | |
| CVE-2016-10741 | Linux kernel 竞争条件问题漏洞 | |
| CVE-2019-7308 | Linux kernel 数字错误漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2017-18361
No comments yet