Lucene search
RedhatCVELIST:CVE-2018-10868HistoryMay 26, 2021 - 6:03 p.m.
CVE-2018-10868
2021-05-2618:03:25
CWE-400
redhat
www.cve.org
0.001 Low
EPSS
Percentile
42.9%
redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a “Billion Laugh Attack” by replying to XMLRPC methods when getting the status of an host.
CNA Affected
[
{
"product": "redhat-certification",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "redhat-certification 7"
}
]
}
]Related
nvd
nvd
CVE-2018-10868
2021-05-26 19:15:08
cve
cve
CVE-2018-10868
2021-05-26 19:15:08
prion
prion
Code injection
2021-05-26 19:15:00
redhatcve
redhatcve
CVE-2018-10868
2018-06-22 09:20:31