{"action":"Upgrade org.apache.ranger:ranger to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"org.apache.ranger:ranger","cve_ids":["CVE-2018-11778"],"ecosystem":"Maven","epss":0.04011,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-c99h-fgqm-6679","id":"tcs_01M5N8S0T0WH6GE40GR5NJ8NR6","modified_at":"2023-11-08T03:59:47.565690Z","published_at":"2018-10-17T17:22:23Z","references":["https://osv.dev/vulnerability/GHSA-c99h-fgqm-6679","https://nvd.nist.gov/vuln/detail/CVE-2018-11778","https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","https://github.com/advisories/GHSA-c99h-fgqm-6679","https://lists.apache.org/thread.html/r04bc435a92911de4b52d2b98f169bd7cf2e8bbeb53b03788df8f932c@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rd88077a781ef38f7687c100f93992f4dda8aa101925050c4af470998@%3Cdev.ranger.apache.org%3E","https://seclists.org/oss-sec/2018/q4/11"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-c99h-fgqm-6679","url":"https://osv.dev/vulnerability/GHSA-c99h-fgqm-6679"}],"summary":"UnixAuthenticationService in Apache Ranger was updated to correctly handle user input to avoid Stack-based buffer overflow"}