#VU10381 Infinite loop in JBoss Application Server - CVE-2018-1041

Vulnerability identifier: #VU10381

Vulnerability risk: Low

CVSSv4.0: 2.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2018-1041

CWE-ID: CWE-835

Exploitation vector: Local network

Exploit availability: Yes

Vulnerable software:
JBoss Application Server
Server applications / Application servers

Vendor: Red Hat Inc.

Description
The vulnerability allows an adjacent attacker to cause DoS condition on the target system.

The weakness exists due to an error when handling malicious input. An adjacent attacker can send specially crafted data to trigger an empty buffer read error in RemoteMessageChannel, consume excessive CPU resources and cause the application to enter an infinite loop and then the service to crash.

Mitigation
Install update from vendor's website.

Vulnerable software versions

JBoss Application Server: 6 - 6.4

---

External links
https://access.redhat.com/security/cve/CVE-2018-1041

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.