Every CVE Search/ Get API key

CVE-2018-1002161

Updated koji packages fix security vulnerability

No scoreFix available

Multiple xmlrpc call handlers in Koji’s hub code contain SQL injection bugs. By passing carefully constructed arguments to these calls, an unauthenticated user can issue arbitrary SQL commands to Koji’s database. This gives the attacker broad ability to manipulate or destroy data (CVE-2018-1002161).

What each source reports

OSVMGASA-2019-0144 No score

Updated koji packages fix security vulnerability

Multiple xmlrpc call handlers in Koji’s hub code contain SQL injection bugs. By passing carefully constructed arguments to these calls, an unauthenticated user can issue arbitrary SQL commands to Koji’s database. This gives the attacker broad ability to manipulate or destroy data (CVE-2018-1002161).

Record
MGASA-2019-0144
Updated
2026-11-02
OSVUBUNTU-CVE-2018-1002161 No score

SQL injection in multiple remote calls

Record
UBUNTU-CVE-2018-1002161
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
koji
Mageia:6
 before 1.12.2-1.mga6
1.12.2-1.mga6
koji
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.10.0-1
 None known
koji
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.10.0-1
 None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1002161 is a vulnerability with no CVSS score yet in koji, published December 31, 2018. No source lists public exploit code. Fixed in koji 1.12.2-1.mga6.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open