CVE-2018-1330

When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP requests with trailers can lead to a libprocess crash too because of the mistakenly planted assertion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.

• CWE-20

• https://lists.apache.org/thread.html/395cb6bcf367702acd1e580a1f39b56cdd7a5953d0368b4c1adb1dde%40%3Cdev.mesos.apache.org%3E
• https://lists.apache.org/thread.html/395cb6bcf367702acd1e580a1f39b56cdd7a5953d0368b4c1adb1dde%40%3Cdev.mesos.apache.org%3E

Published

Sep 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13294Information exposure vulnerability in SYNO.Personal.Profile …4.3
• CVE-2018-13295Information exposure vulnerability in SYNO.Personal.Applicat…4.3
• CVE-2018-13296Uncontrolled resource consumption vulnerability in TLS confi…7.5
• CVE-2018-13297Information exposure vulnerability in SYNO.SynologyDrive.Fil…5.3
• CVE-2018-13298Channel accessible by non-endpoint vulnerability in privacy …4.2
• CVE-2018-13299Relative path traversal vulnerability in Attachment Uploader…4.3
• CVE-2018-13300In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParame…
• CVE-2018-13301In FFmpeg 4.0.1, due to a missing check of a profile value b…
• CVE-2018-13302In FFmpeg 4.0.1, improper handling of frame types (other tha…
• CVE-2018-13303In FFmpeg 4.0.1, a missing check for failure of a call to in…
• CVE-2018-13304In libavcodec in FFmpeg 4.0.1, improper maintenance of the c…
• CVE-2018-13305In FFmpeg 4.0.1, due to a missing check for negative values …