CVE-2018-1041

jboss-remoting: High CPU Denial of Service

Published Feb 15, 2018 CVSS 3.0 · 7.5 High EPSS 15.5% KEV · Not listed
Description
A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 5, 2024, 3:44 AM
Reserved
Dec 4, 2017, 12:00 AM
Status
Modified
Published
Feb 15, 2018, 5:29 PM
Modified
Jun 17, 2026, 1:50 AM
Severity
Moderate
Public date
Feb 5, 2018, 12:00 AM