[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fF3ajKP6Q5mID1sxJn4KoaGsCTwiuEBPwEBiNlofNyUU":3,"g5a-ex:apache\u002Fmesos@*":355,"g5a-family:apache\u002Fmesos":357},{"success":4,"data":5},true,{"product":6,"versions":192,"topVulnerabilitiesByEpss":280,"kevVulnerabilities":332,"seoMetadata":333,"meta":352},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":191},"apache","mesos",87,9,0,"2019-03-25",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,146,148,150,152,154,156,158,160,162,164,166,168,171,173,175,177,179,181,183,185,187,189],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.10.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.10.1",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.1",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.11.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.12.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.12.1",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.13.0",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.13.1",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.14.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.14.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.14.2",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.15.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.15.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.16",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.16.0",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.17",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"0.17.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"0.17.1",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"0.18",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"0.18.0",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"0.18.1",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"0.18.2",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"0.19.0",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"0.19.1",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"0.20.0",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"0.21.0",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"0.21.1",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"0.21.2",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"0.22.0",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"0.22.1",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"0.22.2",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"0.23.0",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"0.23.1",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"0.24.0",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"0.24.1",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"0.24.2",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"0.25.0",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"0.25.1",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"0.26.0",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"0.26.1",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"0.27.0",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"0.27.1",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"0.27.2",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"0.27.3",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"0.28.0",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"0.28.1",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"0.28.2",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.0",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.0",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.0",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.1",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.2",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.3",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.4",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.1",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.3",{"version":144,"cve_count":145,"kev_count":11,"has_kev":16},"1.2.0",2,{"version":147,"cve_count":145,"kev_count":11,"has_kev":16},"1.2.1",{"version":149,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.2",{"version":151,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.3",{"version":153,"cve_count":145,"kev_count":11,"has_kev":16},"1.3.0",{"version":155,"cve_count":145,"kev_count":11,"has_kev":16},"1.3.1",{"version":157,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.2",{"version":159,"cve_count":145,"kev_count":11,"has_kev":16},"1.4.0",{"version":161,"cve_count":145,"kev_count":11,"has_kev":16},"1.4.0-dev",{"version":163,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.1",{"version":165,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.2",{"version":167,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.3",{"version":169,"cve_count":170,"kev_count":11,"has_kev":16},"1.5.0",1,{"version":172,"cve_count":170,"kev_count":11,"has_kev":16},"1.5.1",{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.2",{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.3",{"version":178,"cve_count":145,"kev_count":11,"has_kev":16},"1.6.0",{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.1",{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.2",{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.1",{"version":188,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.2",{"version":190,"cve_count":145,"kev_count":11,"has_kev":16},"1.8.0","Mesos by Apache is a technology product with 87 tracked versions and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":145,"kev_count":11,"has_kev":16},{"version":147,"cve_count":145,"kev_count":11,"has_kev":16},{"version":149,"cve_count":11,"kev_count":11,"has_kev":16},{"version":151,"cve_count":11,"kev_count":11,"has_kev":16},{"version":153,"cve_count":145,"kev_count":11,"has_kev":16},{"version":155,"cve_count":145,"kev_count":11,"has_kev":16},{"version":157,"cve_count":11,"kev_count":11,"has_kev":16},{"version":159,"cve_count":145,"kev_count":11,"has_kev":16},{"version":161,"cve_count":145,"kev_count":11,"has_kev":16},{"version":163,"cve_count":11,"kev_count":11,"has_kev":16},{"version":165,"cve_count":11,"kev_count":11,"has_kev":16},{"version":167,"cve_count":11,"kev_count":11,"has_kev":16},{"version":169,"cve_count":170,"kev_count":11,"has_kev":16},{"version":172,"cve_count":170,"kev_count":11,"has_kev":16},{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},{"version":178,"cve_count":145,"kev_count":11,"has_kev":16},{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},{"version":188,"cve_count":11,"kev_count":11,"has_kev":16},{"version":190,"cve_count":145,"kev_count":11,"has_kev":16},[281,289,296,301,308,313,318,322,328],{"cveId":282,"description":283,"publishedDate":284,"cvssScore":285,"cvssVersion":286,"severity":287,"isKev":16,"epssScore":288},"CVE-2019-5736","runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to \u002Fproc\u002Fself\u002Fexe.","2019-02-11",8.6,"v3.1","High",0.98452,{"cveId":290,"description":291,"publishedDate":292,"cvssScore":293,"cvssVersion":294,"severity":287,"isKev":16,"epssScore":295},"CVE-2018-11793","When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1, and 1.7.0 might overflow the stack due to unbounded recursion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.","2019-03-05",7.5,"v3.0",0.0497,{"cveId":297,"description":298,"publishedDate":299,"cvssScore":293,"cvssVersion":294,"severity":287,"isKev":16,"epssScore":300},"CVE-2018-1330","When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP requests with trailers can lead to a libprocess crash too because of the mistakenly planted assertion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.","2018-09-13",0.03745,{"cveId":302,"description":303,"publishedDate":304,"cvssScore":305,"cvssVersion":294,"severity":306,"isKev":16,"epssScore":307},"CVE-2018-8023","Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). In Apache Mesos versions pre-1.4.2, 1.5.0, 1.5.1, 1.6.0 the comparison of the generated HMAC value against the provided signature in the JWT implementation used is vulnerable to a timing attack because instead of a constant-time string comparison routine a standard `==` operator has been used. A malicious actor can therefore abuse the timing difference of when the JWT validation function returns to reveal the correct HMAC value.","2018-09-21",5.9,"Medium",0.03056,{"cveId":309,"description":310,"publishedDate":12,"cvssScore":311,"cvssVersion":286,"severity":287,"isKev":16,"epssScore":312},"CVE-2019-0204","A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and\u002For the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain root-level code execution on the host.",7.8,0.02712,{"cveId":314,"description":315,"publishedDate":316,"cvssScore":293,"cvssVersion":294,"severity":287,"isKev":16,"epssScore":317},"CVE-2017-7687","When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.","2017-09-29",0.02448,{"cveId":319,"description":320,"publishedDate":316,"cvssScore":293,"cvssVersion":294,"severity":287,"isKev":16,"epssScore":321},"CVE-2017-9790","When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev crashes if the request path is empty, because the parser assumes the request path always starts with '\u002F'. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.",0.02446,{"cveId":323,"description":324,"publishedDate":325,"cvssScore":326,"cvssVersion":294,"severity":306,"isKev":16,"epssScore":327},"CVE-2018-1000420","An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall\u002FRead access to obtain credentials IDs for credentials stored in Jenkins.","2019-01-09",6.5,0.01449,{"cveId":329,"description":330,"publishedDate":325,"cvssScore":326,"cvssVersion":294,"severity":306,"isKev":16,"epssScore":331},"CVE-2018-1000421","An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall\u002FRead access to initiate a test connection to an attacker-specified Mesos server with attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.",0.01293,[],{"title":334,"metaDescription":335,"keywords":336,"structuredData":337},"Mesos by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mesos by Apache covering 87 versions with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mesos vulnerabilities, Mesos security, Mesos CVE, Apache Mesos, Mesos threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":338,"@type":339,"name":340,"description":335,"url":341,"manufacturer":342,"applicationCategory":346,"softwareVersion":347,"mainEntity":348},"https:\u002F\u002Fschema.org","SoftwareApplication","Mesos","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fmesos",{"@type":343,"name":344,"url":345},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","87 versions tracked",{"@type":349,"name":350,"description":351,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Mesos Security Vulnerabilities","Security vulnerabilities affecting Mesos by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":353,"apiVersion":354},"2026-10-19T13:58:36.179Z","3.0",{"rows":356,"total":11,"capped":16,"failed":11},[],[]]