Crash when decoding malformed HTTP requests or malformed JSON payload

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-1330 · ADVISORY
• lists.apache.org/thread.html/395cb6bcf367702acd1e580a1f39b56cdd7a5953d0368b4c1adb1dde@%3Cdev.mesos.apache.org%3E · WEB
• lists.apache.org/thread.html/395cb6bcf367702acd1e580a1f39b56cdd7a5953d0368b4c1adb1dde%40%3Cdev.mesos.apache.org%3E

Lỗ hổng khác của org.apache.mesos:mesos

• CVE-2019-0204CAO 7.8A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the com…
• CVE-2018-11793CAO 7.5When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.…
• CVE-2018-8023TRUNG BÌNH 5.9Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). In Apache Mesos versions …
• CVE-2017-9790CAO 7.5When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3…
• CVE-2017-7687CAO 7.5When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1…