Description

A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.

Remediation

References

CVE-2018-1000864

Related Vulnerabilities

Squid NULL Pointer Dereference Vulnerability (CVE-2018-1172)

WordPress Plugin 10Web Map Builder for Google Maps Cross-Site Scripting (1.0.69)

WordPress Plugin Google Sitemap by BestWebSoft Cross-Site Scripting (2.9.1)

Apache HTTP Server Other Vulnerability (CVE-2007-1743)

Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2018-1999042)

Severity

Medium

Classification

CVE-2018-1000864 CWE-835 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities