GHSA-8qpf-fv36-h4r8
Infinite Loop in Jenkins Core
At a glance
- Published
- Updated
- CVE
- CVE-2018-1999044
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
A Cron expression form validation could enter infinite loop, potentially resulting in denial of service. The form validation for cron expressions (e.g. "Poll SCM", "Build periodically") could enter infinite loops when cron expressions only matching certain rare dates were entered, blocking request handling threads indefinitely.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.jenkins-ci.main:jenkins-core | introduced 0, fixed 2.138 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2018-1999044 ADVISORY
- https://github.com/jenkinsci/jenkins/commit/e5046911c57e60a1d6d8aca9b21bd9093b0f3763 WEB
- https://jenkins.io/security/advisory/2018-08-15/#SECURITY-790 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |