CVE-2018-1999044
First published: Thu Aug 23 2018(Updated: )
A Cron expression form validation could enter infinite loop, potentially resulting in denial of service. The form validation for cron expressions (e.g. "Poll SCM", "Build periodically") could enter infinite loops when cron expressions only matching certain rare dates were entered, blocking request handling threads indefinitely.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jenkins Jenkins | <=2.121.2 | |
| Jenkins Jenkins | <=2.137 | |
| maven/org.jenkins-ci.main:jenkins-core | <2.138 | 2.138 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- collector/github-advisory-latest
- alias/GHSA-8qpf-fv36-h4r8
- alias/CVE-2018-1999044
- collector/nvd-cve
- collector/github-advisory
- agent/author
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/event
- agent/trending
- agent/tags
- agent/source
- vendor/jenkins
- canonical/jenkins jenkins
- version/jenkins jenkins/2.121.2
- version/jenkins jenkins/2.137
- package-manager/maven