Lucene search

CVE-2018-10237

🗓️ 26 Apr 2018 21:00:29Reported by [email protected]Type

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data

Reporter	Title	Published	Views	Family All 144
IBM Security Bulletins	Security Bulletin: Potential denial of service in Liberty for Java for IBM Cloud (CVE-2018-10237)	21 Mar 201917:10	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Solr affects IBM Operations Analytics - Log Analysis Analysis (CVE-2018-10237)	16 Apr 202107:03	–	ibm
IBM Security Bulletins	Security Bulletin: Potential denial of service in WebSphere Application Server affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2018-10237)	22 Feb 202219:59	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in Guava (CVE-2018-10237) affects IBM Spectrum LSF Application Center	1 Mar 201912:25	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2018-10237)	28 Jun 202322:13	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2018-10237)	28 Jun 202322:12	–	ibm
IBM Security Bulletins	Security Bulletin: Potential denial of service in WebSphere Application Server shipped with IBM Operations Analytics - Log Analysis (CVE-2018-10237)	28 Mar 201909:15	–	ibm
IBM Security Bulletins	Security Bulletin: Potential denial of service in WebSphere Application Server (CVE-2018-10237)	25 Mar 201913:10	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2018-10237)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: Potential denial of service in WebSphere Application Server bundled with IBM WebSphere Application Server Patterns (CVE-2018-10237)	7 Feb 201912:45	–	ibm

Nvd

Node

google guavaRange11.0–24.1.1

Node

redhat openshift_container_platformMatch3.11

redhat openstackMatch13

redhat satelliteMatch6.4

redhat satellite_capsuleMatch6.4

redhat virtualizationMatch4.2

redhat virtualization_hostMatch4.0

Node

redhat jboss_enterprise_application_platformMatch6.0.0

redhat jboss_enterprise_application_platformMatch6.4.0

redhat jboss_enterprise_application_platformMatch7.1.0

redhat openshift_container_platformMatch4.1

redhat virtualizationMatch4.0

redhat virtualization_hostMatch4.0

AND

redhat enterprise_linuxMatch7.0

Node

redhat jboss_enterprise_application_platformMatch6.0.0

redhat jboss_enterprise_application_platformMatch6.4.0

AND

redhat enterprise_linuxMatch5.0

Node

redhat jboss_enterprise_application_platformMatch6.0.0

redhat jboss_enterprise_application_platformMatch6.4.0

redhat jboss_enterprise_application_platformMatch7.1.0

AND

redhat enterprise_linuxMatch6.0

Node

oracle banking_paymentsRange14.1.0–14.4.0

oracle communications_ip_service_activatorMatch7.3.0

oracle communications_ip_service_activatorMatch7.4.0

oracle customer_management_and_segmentation_foundationMatch18.0

oracle database_serverMatch12.2.0.1

oracle database_serverMatch18c

oracle database_serverMatch19c

oracle flexcube_investor_servicingMatch12.1.0

oracle flexcube_investor_servicingMatch12.3.0

oracle flexcube_investor_servicingMatch12.4.0

oracle flexcube_investor_servicingMatch14.0.0

oracle flexcube_investor_servicingMatch14.1.0

oracle flexcube_private_bankingMatch12.0.0

oracle flexcube_private_bankingMatch12.1.0

oracle retail_integration_busMatch15.0

oracle retail_integration_busMatch16.0

oracle retail_xstore_point_of_serviceMatch7.1

oracle retail_xstore_point_of_serviceMatch15.0

oracle retail_xstore_point_of_serviceMatch16.0

oracle retail_xstore_point_of_serviceMatch17.0

oracle weblogic_serverMatch12.2.1.3.0

Source	Link
lists	www.lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/33c6bccfeb7adf644d4d79894ca8f09370be6ed4b20632c2e228d085%40%3Ccommits.cassandra.apache.org%3E
lists	www.lists.apache.org/thread.html/r223bc776a077d0795786c38cbc6e7dd808fce1a9161b00ba9c0a5d55%40%3Cissues.lucene.apache.org%3E
lists	www.lists.apache.org/thread.html/ra4f44016926dcb034b3b230280a18102062f94ae55b8a31bb92fed84%40%3Cissues.lucene.apache.org%3E
lists	www.lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb%40%3Cuser.flink.apache.org%3E
lists	www.lists.apache.org/thread.html/3d5dbdd92ac9ceaef90e40f78599f9109f2f345252e0ac9d98e7e084%40%3Cgitbox.activemq.apache.org%3E
lists	www.lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540%40%3Cdev.syncope.apache.org%3E
lists	www.lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
access	www.access.redhat.com/errata/RHSA-2018:2743
lists	www.lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Apr 2018 21:29Current

5.8Medium risk

Vulners AI Score5.8

CVSS24.3

CVSS35.9

EPSS0.02296

CWE-770