CVE-2018-10864: Medium severity red hat certification vulnerability
An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded in DocumentBase:loadFiltered in the documentbase.py file. A remote attacker may provide an existing but invalid XML file which would be opened and never closed, possibly producing a Denial of Service.
Other sources
An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded. A remote attacker may provide an existing but invalid XML file which would be opened and never closed, possibly producing a Denial of Service.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-10864?
CVE-2018-10864 is a vulnerability in Redhat Certification, where an uncontrolled resource consumption flaw allows a remote attacker to cause a Denial of Service by providing an invalid XML file.
What is the severity of CVE-2018-10864?
The severity of CVE-2018-10864 is medium, with a severity value of 6.2.
Which software is affected by CVE-2018-10864?
Redhat Certification is affected by CVE-2018-10864.
How can an attacker exploit CVE-2018-10864?
An attacker can exploit CVE-2018-10864 by providing an existing but invalid XML file, which will be opened and never closed, leading to resource consumption and a possible Denial of Service.
Is Redhat Linux 7.0 vulnerable to CVE-2018-10864?
No, Redhat Linux 7.0 is not vulnerable to CVE-2018-10864.