CVE-2018-1041 PUBLISHED CVSS 5 MEDIUM

A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.

EPSS 14.13% · 94.3th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
14.13%
94.3th percentile

Affected Products

VendorProductVersions
jbossjboss-remoting3.3.10
Red Hat, Inc.jboss-remotingsince 3.3.10
redhatjboss_enterprise_application_platform6.0.0, 6.4.0

Timeline

References

Open in Interactive Console →