aliasrobotics / RVD

Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.
https://aliasrobotics.com
GNU General Public License v3.0
179 stars 31 forks source link

RVD#2040: Possible binding to all interfaces., /opt/ros_noetic_ws/src/ros/roslib/src/roslib/network.py:241 #2040

Closed rvd-bot closed 4 years ago

rvd-bot commented 4 years ago
{
    "id": 2040,
    "title": "RVD#2040: Possible binding to all interfaces., /opt/ros_noetic_ws/src/ros/roslib/src/roslib/network.py:241",
    "type": "bug",
    "description": "MEDIUM confidence of MEDIUM severity bug. Possible binding to all interfaces. at /opt/ros_noetic_ws/src/ros/roslib/src/roslib/network.py:241 See links for more info on the bug.",
    "cwe": "None",
    "cve": "None",
    "keywords": [
        "bandit",
        "bug",
        "static analysis",
        "testing",
        "triage",
        "bug"
    ],
    "system": "",
    "vendor": null,
    "severity": {
        "rvss-score": 0,
        "rvss-vector": "",
        "severity-description": "",
        "cvss-score": 0,
        "cvss-vector": ""
    },
    "links": [
        "https://github.com/aliasrobotics/RVD/issues/2040",
        "https://bandit.readthedocs.io/en/latest/plugins/b104_hardcoded_bind_all_interfaces.html"
    ],
    "flaw": {
        "phase": "testing",
        "specificity": "subject-specific",
        "architectural-location": "application-specific",
        "application": "N/A",
        "subsystem": "N/A",
        "package": "N/A",
        "languages": "None",
        "date-detected": "2020-05-29 (09:22)",
        "detected-by": "Alias Robotics",
        "detected-by-method": "testing static",
        "date-reported": "2020-05-29 (09:22)",
        "reported-by": "Alias Robotics",
        "reported-by-relationship": "automatic",
        "issue": "https://github.com/aliasrobotics/RVD/issues/2040",
        "reproducibility": "always",
        "trace": "/opt/ros_noetic_ws/src/ros/roslib/src/roslib/network.py:241",
        "reproduction": "See artifacts below (if available)",
        "reproduction-image": ""
    },
    "exploitation": {
        "description": "",
        "exploitation-image": "",
        "exploitation-vector": ""
    },
    "mitigation": {
        "description": "",
        "pull-request": "",
        "date-mitigation": ""
    }
}
ibaiape commented 4 years ago

Duplicate of #1933