{"schemaVersion":3,"id":"CVE-2018-12545","aliases":["UBUNTU-CVE-2018-12545","GHSA-h2f4-v4c4-6wx4"],"status":"published","duplicateOf":null,"title":null,"description":"In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings.","dates":{"published":"2019-03-27T19:21:37.000Z","modified":"2024-08-05T08:38:06.170Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.05124,"percentile":0.92301,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.05124},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05124,"percentile":0.92301}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05124,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05124,"percentile":0.92301}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"},{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"ubuntu","product":"jetty9","name":"jetty9","label":"jetty9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/jetty9","purlType":"deb","versions":[{"text":"< 9.4.15-1~18.04.1ubuntu1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.15-1~18.04.1ubuntu1","eol":null,"hubHref":null},{"vendor":"eclipse","product":"jetty","name":"jetty","label":"jetty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"9.3.0:20150601","noFixRecorded":false,"fixedIn":null},{"text":"9.3.0:20150608","noFixRecorded":false,"fixedIn":null},{"text":"9.3.0:20150612","noFixRecorded":false,"fixedIn":null},{"text":"9.3.0:maintenance0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.0:maintenance1","noFixRecorded":false,"fixedIn":null},{"text":"9.3.0:maintenance2","noFixRecorded":false,"fixedIn":null},{"text":"9.3.0:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.0:rc1","noFixRecorded":false,"fixedIn":null},{"text":"9.3.1:20150714","noFixRecorded":false,"fixedIn":null},{"text":"9.3.2:20150730","noFixRecorded":false,"fixedIn":null},{"text":"9.3.3:20150825","noFixRecorded":false,"fixedIn":null},{"text":"9.3.3:20150827","noFixRecorded":false,"fixedIn":null},{"text":"9.3.4:20151005","noFixRecorded":false,"fixedIn":null},{"text":"9.3.4:20151007","noFixRecorded":false,"fixedIn":null},{"text":"9.3.4:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.4:rc1","noFixRecorded":false,"fixedIn":null},{"text":"9.3.5:20151012","noFixRecorded":false,"fixedIn":null},{"text":"9.3.6:20151106","noFixRecorded":false,"fixedIn":null},{"text":"9.3.7:20160115","noFixRecorded":false,"fixedIn":null},{"text":"9.3.7:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.7:rc1","noFixRecorded":false,"fixedIn":null},{"text":"9.3.8:20160311","noFixRecorded":false,"fixedIn":null},{"text":"9.3.8:20160314","noFixRecorded":false,"fixedIn":null},{"text":"9.3.8:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.9:20160517","noFixRecorded":false,"fixedIn":null},{"text":"9.3.9:maintenance_0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.9:maintenance_1","noFixRecorded":false,"fixedIn":null},{"text":"9.3.10:20160621","noFixRecorded":false,"fixedIn":null},{"text":"9.3.10:maintenance_0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.11:20160721","noFixRecorded":false,"fixedIn":null},{"text":"9.3.11:maintenance_0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.12:20160915","noFixRecorded":false,"fixedIn":null},{"text":"9.3.13:20161014","noFixRecorded":false,"fixedIn":null},{"text":"9.3.13:maintenance_0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.14:20161028","noFixRecorded":false,"fixedIn":null},{"text":"9.3.15:20161220","noFixRecorded":false,"fixedIn":null},{"text":"9.3.16:20170119","noFixRecorded":false,"fixedIn":null},{"text":"9.3.16:20170120","noFixRecorded":false,"fixedIn":null},{"text":"9.3.17:20170317","noFixRecorded":false,"fixedIn":null},{"text":"9.3.17:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.18:20170406","noFixRecorded":false,"fixedIn":null},{"text":"9.3.19:20170502","noFixRecorded":false,"fixedIn":null},{"text":"9.3.20:20170531","noFixRecorded":false,"fixedIn":null},{"text":"9.3.21:20170918","noFixRecorded":false,"fixedIn":null},{"text":"9.3.21:maintenance_0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.21:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.3.22:20171030","noFixRecorded":false,"fixedIn":null},{"text":"9.3.23:20180228","noFixRecorded":false,"fixedIn":null},{"text":"9.3.24:20180605","noFixRecorded":false,"fixedIn":null},{"text":"9.4.0:20161207","noFixRecorded":false,"fixedIn":null},{"text":"9.4.0:20161208","noFixRecorded":false,"fixedIn":null},{"text":"9.4.0:20180619","noFixRecorded":false,"fixedIn":null},{"text":"9.4.0:maintenance_0","noFixRecorded":false,"fixedIn":null},{"text":"9.4.0:maintenance_1","noFixRecorded":false,"fixedIn":null},{"text":"9.4.0:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.4.0:rc1","noFixRecorded":false,"fixedIn":null},{"text":"9.4.0:rc2","noFixRecorded":false,"fixedIn":null},{"text":"9.4.0:rc3","noFixRecorded":false,"fixedIn":null},{"text":"9.4.1:20170120","noFixRecorded":false,"fixedIn":null},{"text":"9.4.1:20180619","noFixRecorded":false,"fixedIn":null},{"text":"9.4.2:20170220","noFixRecorded":false,"fixedIn":null},{"text":"9.4.2:20180619","noFixRecorded":false,"fixedIn":null},{"text":"9.4.3:20170317","noFixRecorded":false,"fixedIn":null},{"text":"9.4.3:20180619","noFixRecorded":false,"fixedIn":null},{"text":"9.4.4:20170410","noFixRecorded":false,"fixedIn":null},{"text":"9.4.4:20170414","noFixRecorded":false,"fixedIn":null},{"text":"9.4.4:20180619","noFixRecorded":false,"fixedIn":null},{"text":"9.4.5:20170502","noFixRecorded":false,"fixedIn":null},{"text":"9.4.5:20180619","noFixRecorded":false,"fixedIn":null},{"text":"9.4.6:20170531","noFixRecorded":false,"fixedIn":null},{"text":"9.4.6:20180619","noFixRecorded":false,"fixedIn":null},{"text":"9.4.7:20170914","noFixRecorded":false,"fixedIn":null},{"text":"9.4.7:20180619","noFixRecorded":false,"fixedIn":null},{"text":"9.4.7:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.4.8:20171121","noFixRecorded":false,"fixedIn":null},{"text":"9.4.8:20180619","noFixRecorded":false,"fixedIn":null},{"text":"9.4.9:20180320","noFixRecorded":false,"fixedIn":null},{"text":"9.4.10:20180503","noFixRecorded":false,"fixedIn":null},{"text":"9.4.10:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.4.10:rc1","noFixRecorded":false,"fixedIn":null},{"text":"9.4.11:20180605","noFixRecorded":false,"fixedIn":null},{"text":"9.4.12:rc0","noFixRecorded":false,"fixedIn":null},{"text":"9.4.12:rc1","noFixRecorded":false,"fixedIn":null},{"text":"9.4.12:rc2","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.3.0:20150601 | 9.3.0:20150608 | 9.3.0:20150612 | 9.3.0:maintenance0 | 9.3.0:maintenance1 | 9.3.0:maintenance2 | 9.3.0:rc0 | 9.3.0:rc1 | 9.3.1:20150714 | 9.3.2:20150730 | 9.3.3:20150825 | 9.3.3:20150827 | 9.3.4:20151005 | 9.3.4:20151007 | 9.3.4:rc0 | 9.3.4:rc1 | 9.3.5:20151012 | 9.3.6:20151106 | 9.3.7:20160115 | 9.3.7:rc0 | 9.3.7:rc1 | 9.3.8:20160311 | 9.3.8:20160314 | 9.3.8:rc0 | 9.3.9:20160517 | 9.3.9:maintenance_0 | 9.3.9:maintenance_1 | 9.3.10:20160621 | 9.3.10:maintenance_0 | 9.3.11:20160721 | 9.3.11:maintenance_0 | 9.3.12:20160915 | 9.3.13:20161014 | 9.3.13:maintenance_0 | 9.3.14:20161028 | 9.3.15:20161220 | 9.3.16:20170119 | 9.3.16:20170120 | 9.3.17:20170317 | 9.3.17:rc0 | 9.3.18:20170406 | 9.3.19:20170502 | 9.3.20:20170531 | 9.3.21:20170918 | 9.3.21:maintenance_0 | 9.3.21:rc0 | 9.3.22:20171030 | 9.3.23:20180228 | 9.3.24:20180605 | 9.4.0:20161207 | 9.4.0:20161208 | 9.4.0:20180619 | 9.4.0:maintenance_0 | 9.4.0:maintenance_1 | 9.4.0:rc0 | 9.4.0:rc1 | 9.4.0:rc2 | 9.4.0:rc3 | 9.4.1:20170120 | 9.4.1:20180619 | 9.4.2:20170220 | 9.4.2:20180619 | 9.4.3:20170317 | 9.4.3:20180619 | 9.4.4:20170410 | 9.4.4:20170414 | 9.4.4:20180619 | 9.4.5:20170502 | 9.4.5:20180619 | 9.4.6:20170531 | 9.4.6:20180619 | 9.4.7:20170914 | 9.4.7:20180619 | 9.4.7:rc0 | 9.4.8:20171121 | 9.4.8:20180619 | 9.4.9:20180320 | 9.4.10:20180503 | 9.4.10:rc0 | 9.4.10:rc1 | 9.4.11:20180605 | 9.4.12:rc0 | 9.4.12:rc1 | 9.4.12:rc2","eol":{"isEol":true,"eolDate":"2020-12-07T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"9.3","label":"9.3","eolFrom":"2020-12-07T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"9.3.30.v20211001"},"product":{"name":"eclipse-jetty","label":"Eclipse Jetty","category":"server-app"}},"hubHref":"/vendor/eclipse/jetty"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"28","noFixRecorded":false,"fixedIn":null}],"versionsText":"28","eol":{"isEol":true,"eolDate":"2019-05-28T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"28","label":"28","eolFrom":"2019-05-28T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"org.eclipse.jetty","product":"jetty-server","name":"org.eclipse.jetty:jetty-server","label":"jetty-server","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.eclipse.jetty/jetty-server","purlType":"maven","versions":[{"text":"≥ 9.4.0, < 9.4.12.v20180830","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.3.0, < 9.3.25.v20180904","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.4.0, < 9.4.12.v20180830 | ≥ 9.3.0, < 9.3.25.v20180904","eol":null,"hubHref":null},{"vendor":"the eclipse foundation","product":"eclipse jetty","name":"Eclipse Jetty","label":"eclipse jetty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.3.0, < unspecified","noFixRecorded":false,"fixedIn":null},{"text":"≥ unspecified, < 9.4.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.3.0, < unspecified | ≥ unspecified, < 9.4.12","eol":null,"hubHref":"/vendor/the_eclipse_foundation/eclipse_jetty"}],"affectedCount":5,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://lists.apache.org/thread.html/70744fe4faba8e2fa7e50a7fc794dd03cb28dad8b21e08ee59bb1606%40%3Cdevnull.infra.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/febc94ffec9275dcda64633e0276a1400cd318e571009e4cda9b7a79%40%3Cnotifications.accumulo.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/13f5241048ec0bf966a6ddd306feaf40de5b20e1f09096b9cddeddf2%40%3Ccommits.accumulo.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIS4LALKZNLF5X5IGNGRSKERG7FY4QG6/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","label":"www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","hostname":"www.oracle.com","tags":["X Refsource MISC","Patch","Third Party Advisory","WEB"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","label":"www.oracle.com/security-alerts/cpuoct2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","Third Party Advisory","WEB"]},{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=538096","label":"bugs.eclipse.org/bugs/show_bug.cgi?id=538096","hostname":"bugs.eclipse.org","tags":["X Refsource CONFIRM","Issue Tracking","Vendor Advisory","REPORT","WEB"]},{"url":"https://ubuntu.com/security/CVE-2018-12545","label":"ubuntu.com/security/CVE-2018-12545","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12545","label":"www.cve.org/CVERecord?id=CVE-2018-12545","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12545","label":"nvd.nist.gov/vuln/detail/CVE-2018-12545","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/advisories/GHSA-h2f4-v4c4-6wx4","label":"github.com/advisories/GHSA-h2f4-v4c4-6wx4","hostname":"github.com","tags":["Advisory"]},{"url":"https://lists.apache.org/thread.html/13f5241048ec0bf966a6ddd306feaf40de5b20e1f09096b9cddeddf2@%3Ccommits.accumulo.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/70744fe4faba8e2fa7e50a7fc794dd03cb28dad8b21e08ee59bb1606@%3Cdevnull.infra.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/febc94ffec9275dcda64633e0276a1400cd318e571009e4cda9b7a79@%3Cnotifications.accumulo.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIS4LALKZNLF5X5IGNGRSKERG7FY4QG6","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-03-27T19:21:37.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T08:38:06.170Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T15:18:02.745Z","stale":false,"partial":false}}