Back to Database
Status published
High
CVE-2018-1000047
NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak...
Vulnerability Description
NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result in remote code execution. This attack appear to be exploitable via Victim opens an untrusted file for optimization using Kodiak library.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000047
Credits & Attribution
No credits recorded in the NVD database.
References
More from nasa
View All →CVE-2025-64096
CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check
High
8.8
CVE-2025-59534
CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()
High
7.3
CVE-2025-54878
Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`
High
8.6
CVE-2025-30356
Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`
Critical
9.3
CVE-2025-30216
CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length
Critical
9.4
Affected Vendor
nasa
View all reports →Affected Software
kodiak
Vulnerable Versions:
1.0
Timeline
Official Publish:
February 9th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.