CVE-2018-1041

HIGH 7.5CVE-2018-1041 · Published 15/02/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
jboss-remoting jboss	`= 3.3.10`	No fix yet
jboss enterprise application platform redhat	`= 6.0.0= 6.4.0`	No fix yet

Description

A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.

References

securitytracker.com/id/1040323 · Third Party Advisory
access.redhat.com/errata/RHSA-2018:0268 · Vendor Advisory
access.redhat.com/errata/RHSA-2018:0269 · Vendor Advisory
access.redhat.com/errata/RHSA-2018:0270 · Vendor Advisory
access.redhat.com/errata/RHSA-2018:0271 · Vendor Advisory
access.redhat.com/errata/RHSA-2018:0275 · Vendor Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
exploit-db.com/exploits/44099 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free