Apache Struts CVE-2018-1327 Denial of Service Vulnerability

Bugtraq ID:	103516
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-1327
Remote:	Yes
Local:	No
Published:	Mar 27 2018 12:00AM
Updated:	Mar 27 2018 12:00AM
Credit:	Yevgeniy Grushka & Alvaro Munoz from HPE
Vulnerable:	Apache Struts 2.5.14 Apache Struts 2.3.31 Apache Struts 2.3.30 Apache Struts 2.3.28 Apache Struts 2.3.24 Apache Struts 2.3.5 Apache Struts 2.3.4 1 Apache Struts 2.3.4 Apache Struts 2.2.3 Apache Struts 2.2.1 1 Apache Struts 2.2 Apache Struts 2.1.1 Apache Struts 2.1.1 Apache Struts 2.5.14.1 Apache Struts 2.5.13 Apache Struts 2.5.12 Apache Struts 2.5.11 Apache Struts 2.5.10.1 Apache Struts 2.5.10 Apache Struts 2.5.1 Apache Struts 2.3.8 Apache Struts 2.3.7 Apache Struts 2.3.34 Apache Struts 2.3.33 Apache Struts 2.3.32 Apache Struts 2.3.29 Apache Struts 2.3.28.1 Apache Struts 2.3.24.3 Apache Struts 2.3.24.2 Apache Struts 2.3.24.1 Apache Struts 2.3.20.3 Apache Struts 2.3.20.2 Apache Struts 2.3.20.1 Apache Struts 2.3.20 Apache Struts 2.3.16.3 Apache Struts 2.3.16.2 Apache Struts 2.3.16.1 Apache Struts 2.3.16 Apache Struts 2.3.15.3 Apache Struts 2.3.15.2 Apache Struts 2.3.15.1 Apache Struts 2.3.15 Apache Struts 2.3.14.3 Apache Struts 2.3.14.2 Apache Struts 2.3.14.1 Apache Struts 2.3.14 Apache Struts 2.3.1.2 Apache Struts 2.3.1.1 Apache Struts 2.3.1 Apache Struts 2.2.3.1
Not Vulnerable:	Apache Struts 2.5.16

Apache Struts CVE-2018-1327 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache Struts CVE-2018-1327 Denial of Service Vulnerability

References:

• Apache Homepage (Apache Software Foundation)
  
• Struts Homepage (Apache Software Foundation)
  
• CVE-2018-1327 (Red Hat Bugzilla)
  
• S2-056 (Apache)