Apache Apache Mesos
6 CVEs affecting Apache Apache Mesos. Latest disclosed: 2019-03-25. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-0204 | High | 7.8 | 2019-03-25 | A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Ap… |
CVE-2018-11793 | High | 7.5 | 2019-03-05 | When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1… |
CVE-2018-1330 | High | 7.5 | 2018-09-13 | When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP reques… |
CVE-2017-9790 | High | 7.5 | 2017-09-29 | When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev c… |
CVE-2017-7687 | High | 7.5 | 2017-09-29 | When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1… |
CVE-2018-8023 | Medium | 5.9 | 2018-09-21 | Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). In Apache Mesos versions pre-1.4.2, 1.5.0, 1… |