CVE-2018-10864

MEDIUM

redhat-certification - Denial of Service via Unclosed XML File Handling

Title source: llm

Description

An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded. A remote attacker may provide an existing but invalid XML file which would be opened and never closed, possibly producing a Denial of Service.

References (2)

Core 2

Core References

Issue Tracking, Vendor Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10864

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2018:2373

Scores

CVSS v3 5.3

EPSS 0.0123

EPSS Percentile 65.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Details

CWE

CWE-400

Status published

Products (1)

redhat/certification

Published Aug 13, 2018

Tracked Since Feb 18, 2026