apache mesos CVE-2018-11793 is a vulnerability in Apache Mesos
Published on March 5, 2019

When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1, and 1.7.0 might overflow the stack due to unbounded recursion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.

NVD


Products Associated with CVE-2018-11793

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-11793 are published in Apache Mesos:

Apache Mesos
 

Affected Versions

Apache Software Foundation Apache Mesos Version Apache Mesos pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1, 1.7.0 is affected by CVE-2018-11793

Exploit Probability

EPSS
3.32%
Percentile
86.83%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.