Apache Mesos (Apache Software Foundation) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2019-03-05. Vendor: Apache Software Foundation.

CVEs of Apache Mesos

• CVE-2018-11793 - CVSS 7.5 (high), 2019-03-05: When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1,…
• CVE-2018-8023 - CVSS 5.9 (medium), 2018-09-21: Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). In Apache Mesos versions pre-1.4.2, 1.5.0,…
• CVE-2018-1330 - CVSS 7.5 (high), 2018-09-13: When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP…
• CVE-2017-9790 - CVSS 7.5 (high), 2017-09-29: When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev…
• CVE-2017-7687 - CVSS 7.5 (high), 2017-09-29: When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1,…