# org.apache.mesos:mesos (Maven) vulnerabilities

6 known vulnerabilities, with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://central.sonatype.com/artifact/org.apache.mesos/mesos

## Advisories (6)

### [CVE-2019-0204](https://cve.now/CVE-2019-0204): A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the…

- Severity: Unrated
- Published: Mar 25, 2019
- Affected: fixed in 1.4.3; from 1.5.0, fixed in 1.5.3; from 1.6.0, fixed in 1.6.2; from 1.7.0, fixed in 1.7.2.

### [CVE-2018-11793](https://cve.now/CVE-2018-11793): When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to…

- Severity: Unrated
- Published: Mar 5, 2019
- Affected: fixed in 1.4.3; from 1.5.0, fixed in 1.5.2; from 1.6.0, fixed in 1.6.2; from 1.7.0, fixed in 1.7.1.

### [CVE-2018-8023](https://cve.now/CVE-2018-8023): Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT).

- Severity: Unrated
- Published: Sep 21, 2018
- Affected: fixed in 1.4.2; from 1.5.0, fixed in 1.5.2; from 1.6.0, fixed in 1.6.1.

### [CVE-2018-1330](https://cve.now/CVE-2018-1330): When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception.

- Severity: Unrated
- Published: Sep 13, 2018
- Affected: from 1.4.0, fixed in 1.6.0.

### [CVE-2017-9790](https://cve.now/CVE-2017-9790): When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before…

- Severity: Unrated
- Published: Sep 28, 2017
- Affected: fixed in 1.1.3; from 1.2.0, fixed in 1.2.2; from 1.3.0, fixed in 1.3.1.

### [CVE-2017-7687](https://cve.now/CVE-2017-7687): When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2…

- Severity: Unrated
- Published: Sep 28, 2017
- Affected: fixed in 1.1.3; from 1.2.0, fixed in 1.2.2; from 1.3.0, fixed in 1.3.1.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/maven/org.apache.mesos:mesos
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.