Apache Mesos JSON Payload Parsing Denial of Service Vulnerability [CVE-2018-11793]
CVE Number – CVE-2018-11793
A vulnerability in the JSON payload parser of Apache Mesos could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition an a targeted system.The vulnerability is due to the parsing feature of Apache Mesos when handling a JSON payload with deeply nested JSON structures. An attacker could exploit this vulnerability by submitting a crafted JSON payload for the affected software to parse. A successful exploit could allow the attacker to cause a DoS of Mesos masters, rendering the Mesos-controlled cluster unresponsive.Apache.org has confirmed this vulnerability and released software updates.
Analysis
- An attacker would need to have network access and the ability to submit JSON payloads to the affected system in order to successfully perform an exploit against the system. These factors could mitigate the success of an attempted exploit.
Safeguards
- Administrators are advised to apply the appropriate updates.Administrators are advised to allow only trusted users to have network access.Administrators are advised to run both firewall and antivirus applications to minimize the potential of inbound and outbound threats.Administrators may consider using IP-based access control lists (ACLs) to allow only trusted systems to access the affected systems.Administrators can help protect affected systems from external attacks by using a solid firewall strategy.Administrators are advised to monitor affected systems.
Vendor Announcements
- Apache.org has released a security advisory at the following link: Mesos JSON parsing crash
Fixed Software
- Apache.org has released updates at the following link: Mesos Releases
Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.