CVE-2018-1041: High severity JBoss jboss-remoting vulnerability
A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.
Other sources
A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10.Final-redhat-1, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1041?
CVE-2018-1041 is a vulnerability in the RemoteMessageChannel component introduced in jboss-remoting versions 3.3.10.
What is the severity of CVE-2018-1041?
The severity of CVE-2018-1041 is high (7.5).
How does CVE-2018-1041 affect the software?
CVE-2018-1041 affects jboss-remoting version 3.3.10 and Redhat Jboss Enterprise Application Platform versions 6.0.0 and 6.4.0.
How can an attacker exploit CVE-2018-1041?
An attacker can exploit CVE-2018-1041 to cause denial of service by triggering an infinite loop, resulting in high CPU usage.
How can CVE-2018-1041 be mitigated?
CVE-2018-1041 can be mitigated by updating to a patched version of jboss-remoting or applying the necessary security updates for Redhat Jboss Enterprise Application Platform.