NetSight
IP …
high7.5Public exploit code

CVE-2018-1041

A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.

Affected products

VendorProductAffected versions
JbossJboss-Remoting
Version 3.3.10
RedhatJboss Enterprise Application Platform
Versions 6.0.0, 6.4.0

Weakness classification

CWE-835

References