CVE-2018-1000538
High
Description
Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-(pre)signed requests with large bodies . This vulnerability appears to have been fixed in after commit 9c8b7306f55f2c8c0a5c7cea9a8db9d34be8faa7.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Minio
PublishedJun 26, 2018
First seenJun 26, 2018
How to fix
Update
- minio minio2018-05-16t23-35-33z or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| minio minio | v < 2018-05-16t23-35-33z | 2018-05-16t23-35-33z |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.