CVE-2018-1041: jboss jboss-remoting Loop with Unreachable Exit Condition
Vulnerability summary
CVE-2018-1041 is a high (CVSS 7.5) Loop with Unreachable Exit Condition vulnerability in jboss jboss-remoting. EPSS estimates a 15.53% chance of exploitation in the next 30 days, higher than 96.8% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (exploit-database, 16-02-2018)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 4Timeline
- 15-02-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
15.53%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
No change 0.00 pp
From 15.53% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundJBoss Remoting 6.14.18 - Denial of Service
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Jboss1 product
- jboss-remoting3.3.10
Red hat, inc.1 product
- jboss-remotingsince 3.3.10
Redhat1 product
- jboss_enterprise_application_platform6.0.0 | 6.4.0
3 vendors · 3 products