ai.h2o:sparkling-water-core_2.10 (>=1.3.1, <=1.3.10), ai.h2o:sparkling-water-examples_2.10 (>=1.3.1, <=1.3.10) +140 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.21.0)

org.apache.mesos:mesos MAVEN version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - ai.h2o:sparkling-water-core2.10 =1.3.1, =1.3.1, =0.5.2, =3.3.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =0.9.9.12, =1.0.0,...

com.datastax.spark:spark-cassandra-connector-demos_2.10 (>=1.0.0-rc3, <=1.0.6), com.datastax.spark:spark-cassandra-connector-java_2.10 (>=1.0.0-rc3, <=1.0.6) +26 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.13.0)

org.apache.mesos:mesos MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.datastax.spark:spark-cassandra-connector-demos2.10 =1.0.0-rc3, =1.0.0-rc3, =1.0.0-beta1, =0.2.2, =0.2.2, =0.2....

com.hubspot:singularitybase (>=0.1.1, <=0.1.2), com.hubspot:singularityclient (>=0.1.1, <=0.1.2) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.14.0)

org.apache.mesos:mesos MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot:singularitybase =0.1.1, =0.1.1, =0.1.2 Source cves: CVE-2017-7687 Source advisory:...

com.hubspot:singularitybase (>=0.3.0, <=0.3.2), com.hubspot:singularityclient (>=0.3.0, <=0.3.2) +2 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.17.0)

org.apache.mesos:mesos MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot:singularitybase =0.3.0, =0.3.0, =0.3.0, =0.3.2 - org.jenkins-ci.plugins:mesos 0.2.0 Source cves:...

org.jenkins-ci.plugins:mesos (0.5.0) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.20.0)

org.apache.mesos:mesos MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.5.0 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

com.groupon.mesos:jesos (1.0), com.hubspot:embedsingularityexample (0.4.0) +12 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.20.1)

org.apache.mesos:mesos MAVEN version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.groupon.mesos:jesos 1.0 - com.hubspot:embedsingularityexample 0.4.0 - com.hubspot:singularitybase =0.3.9,...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +906 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.21.1)

org.apache.mesos:mesos MAVEN version 0.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - ae.teletronics.nlp:entityextraction 1.3 - ae.teletronics.nlp:w2vec 1.0 - ai.grakn:client-java 1.3.0 -...

org.jenkins-ci.plugins:mesos (>=0.8.0, <=0.10.1) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.22.1)

org.apache.mesos:mesos MAVEN version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.8.0, =0.10.1 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

org.apache.reef:reef-examples (0.16.0), org.apache.reef:reef-examples-clr (>=0.14.0, <=0.16.0) +3 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.25.0)

org.apache.mesos:mesos MAVEN version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.reef:reef-examples 0.16.0 - org.apache.reef:reef-examples-clr =0.14.0, =0.14.0, =0.14.0, =0.16.0 Source...

io.verizon.ark:core_2.10 (0.1.3), io.verizon.ark:example_2.10 (0.1.3) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.26.0)

org.apache.mesos:mesos MAVEN version 0.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - io.verizon.ark:core2.10 0.1.3 - io.verizon.ark:example2.10 0.1.3 Source cves: CVE-2017-7687 Source advisory:...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

com.dangdang:elastic-job-cloud-executor (>=2.0.3, <=2.1.1), com.dangdang:elastic-job-cloud-scheduler (>=2.0.3, <=2.1.1) +17 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.28.2)

org.apache.mesos:mesos MAVEN version 0.28.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.dangdang:elastic-job-cloud-executor =2.0.3, =2.0.3, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0,...

cn.fossc.com.dangdang:elastic-job-cloud-executor (>=2.1.7, <=2.2.1), cn.fossc.com.dangdang:elastic-job-cloud-scheduler (>=2.1.7, <=2.2.1) +31 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (>=1.0.0, <=1.1.2)

org.apache.mesos:mesos MAVEN version =1.0.0, =2.1.7, =2.1.7, =2.2.0, =2.2.0, =2.1.2, =2.1.2, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.1.0, =0.1.0, =0.3.0, =0.0.1, =1.2.3, =1.2.18 and more Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

cn.fossc.com.dangdang:elastic-job-cloud-executor (>=2.1.7, <=2.2.1), cn.fossc.com.dangdang:elastic-job-cloud-scheduler (>=2.1.7, <=2.2.1) +31 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (>=1.0.0, <=1.1.2)

org.apache.mesos:mesos MAVEN version =1.0.0, =2.1.7, =2.1.7, =2.2.0, =2.2.0, =2.1.2, =2.1.2, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.1.0, =0.1.0, =0.3.0, =0.0.1, =1.2.3, =1.2.18 and more Source cves: CVE-2017-7687 Source advisory: GHSA-X869-784M-JMJ2...

CVE-2017-7687

When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of...

CVE-2017-7687

The CVE-2017-7687 entry affects Apache Mesos where libprocess may crash while handling a decoding failure for a malformed URL path in an HTTP request. Affected are Mesos releases using libprocess prior to 1.1.3, 1.2.x prior to 1.2.2, 1.3.x prior to 1.3.1, and 1.4.0-dev. The root cause is that the...