CVE-2016-10627

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-10627

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10627.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-10627

Aliases

GHSA-3vv5-42wr-m32g

Published

2018-05-29T20:29:01.610Z

Modified

2026-03-14T09:18:22.121230Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.

References

https://nodesecurity.io/advisories/227

Affected packages

Git / github.com/k-kinzal/scala-bin

Affected ranges

Type

GIT

Repo

https://github.com/k-kinzal/scala-bin

Events

Introduced

Last affected

d1adabc323ebc63d704b0347f61ff686fbf6a923

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.3"
        }
    ]
}

Affected versions

0.*

0.1.0

0.2.0

0.2.1

0.3.0

v0.*

v0.3.1

v0.3.2

v0.3.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10627.json"