Vulnerability Bulletins |
CVE-2018-10868 |
|
| Affected software | LINUX REDHAT |
| redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a "Billion Laugh Attack" by replying to XMLRPC methods when getting the status of an host. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2018-10868 | |