CVE-2018-11793: Apache Mesos JSON Payload Parsing DoS Vulnerability 5th Mar 2019

Preface: Apache Mesos is an open-source project to manage computer clusters. It was developed at the University of California, Berkeley.

About Payload in Web services: Typically the term payload refers to JSON-formatted text that is either posted (via an http POST) to a web service when a user creates a resource or returned from a web service (via an http GET) when a user requests a resource (or resources).

Vulnerability detail: A vulnerability in the JSON payload parser of Apache Mesos could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition an a targeted system.

Official announcement: https://lists.apache.org/thread.html/9be975c53e5ad612c7e0af39f5b88837fbfbc32108e587d3d8499844@%3Cdev.mesos.apache.org%3E

Remedy: http://mesos.apache.org/downloads/