CVE-2018-1330

When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception

published September 13, 2018

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP requests with trailers can lead to a libprocess crash too because of the mistakenly planted assertion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03745 · 89.8th percentile
Published
2018-09-13T19:00Z
EPSS history
Timeline
  • 13 SEP 19:00Z
    When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception
    cvelistv5