Apache Software Foundation Mesos 1.4.0 Release Candidate 4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:mesos:1.4.0:rc4:*:*:*:*:*:*

part: a version: 1.4.0 update: rc4

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductMesos (1baeb431-aaa2-54cd-bfc0-72007e6dce54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/mesos purl2cpe 2026-06-01 10:14:24.335316
pkg:github/apache/mesos purl2cpe 2026-06-01 10:14:24.335317
pkg:maven/org.apache.mesos/mesos purl2cpe 2026-06-01 10:14:24.335319
pkg:rpm/opensuse/mesos purl2cpe 2026-06-01 10:14:24.335320

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1330 vulnerable 2026-06-08 05:11:17.729071 Details available
When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP requests with trailers can lead to a libprocess crash too because of the mistakenly planted assertion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.
Published: 2018-09-13T19:00:00.000Z
Updated: 2024-09-16T20:42:57.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11793 vulnerable 2026-06-08 05:10:39.039102 Details available
When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1, and 1.7.0 might overflow the stack due to unbounded recursion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.
Published: 2019-03-05T21:00:00.000Z
Updated: 2024-09-16T16:27:53.700Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.