https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 06:23:17 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-33268 cnvd-2017-33268 https://cve.radiocsirt.org/vuln/cnvd-2017-33268 https://cve.radiocsirt.org/vuln/euvd-2026-173722 EUVD-2026-173722 https://cve.radiocsirt.org/vuln/euvd-2026-173722 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9790 <p>When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev crashes if the request path is empty, because the parser assumes the request path always starts with &#39;/&#39;. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.</p> <p>When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev crashes if the request path is empty, because the parser assumes the request path always starts with &#39;/&#39;. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9790 https://cve.radiocsirt.org/vuln/ghsa-vpcv-78cp-whr3 <p><strong>Affected:</strong> Maven: org.apache.mesos:mesos</p> <p>When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev crashes if the request path is empty, because the parser assumes the request path always starts with &#39;/&#39;. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.</p> <p><strong>Affected:</strong> Maven: org.apache.mesos:mesos</p> <p>When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev crashes if the request path is empty, because the parser assumes the request path always starts with &#39;/&#39;. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.</p> https://cve.radiocsirt.org/vuln/ghsa-vpcv-78cp-whr3 https://cve.radiocsirt.org/vuln/gsd-2017-9790 gsd-2017-9790 https://cve.radiocsirt.org/vuln/gsd-2017-9790