What is the CVSS score of CVE-2018-1000538?

CVE-2018-1000538 has a CVSS 3.0 base score of 7.5 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 1.5%.

Is there a patch available for CVE-2018-1000538?

Yes, a patch is available for CVE-2018-1000538. Update the affected software to the latest version immediately.

Minio CVE-2018-1000538

HIGH

Allocation of File Descriptors or Handles Without Limits or Throttling (CWE-774)

2018-06-26 cve@mitre.org

Denial Of Service Minio

7.5

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Jun 26, 2018 - 16:29 nvd

HIGH 7.5

DescriptionNVD

Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-(pre)signed requests with large bodies . This vulnerability appears to have been fixed in after commit 9c8b7306f55f2c8c0a5c7cea9a8db9d34be8faa7.

AnalysisAI

Minio Inc. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-774. Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-(pre)signed requests with large bodies . This vulnerability appears to have been fixed in after commit 9c8b7306f55f2c8c0a5c7cea9a8db9d34be8faa7. Affected products include: Minio.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Minio

View all

CVE-2023-28434 HIGH This Week POC

8.8 Mar 22

Minio is a Multi-Cloud Object Storage framework. Rated high severity (CVSS 8.8), this vulnerability is remotely exploita

CVE-2023-25812 HIGH This Week POC

8.8 Feb 21

Minio is a Multi-Cloud Object Storage framework. Rated high severity (CVSS 8.8), this vulnerability is remotely exploita

CVE-2022-24842 HIGH This Week POC

8.8 Apr 12

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. Rated high severity (C

CVE-2021-21287 HIGH This Week POC

7.7 Feb 01

MinIO is a High Performance Object Storage released under Apache License v2.0. Rated high severity (CVSS 7.7), this vuln

CVE-2023-28432 HIGH This Week POC

7.5 Mar 22

Minio is a Multi-Cloud Object Storage framework. Rated high severity (CVSS 7.5), this vulnerability is remotely exploita

CVE-2022-31028 HIGH This Week POC

7.5 Jun 07

MinIO is a multi-cloud object storage solution. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitab

CVE-2023-27589 MEDIUM This Month POC

6.5 Mar 14

Minio is a Multi-Cloud Object Storage framework. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploi

CVE-2021-21362 MEDIUM This Month POC

6.5 Mar 08

MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage se

CVE-2021-21390 MEDIUM This Month POC

5.9 Mar 19

MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage se

CVE-2026-40344 HIGH This Week

8.8 Apr 22

Authentication bypass in MinIO RELEASE.2023-05-18T00-05-36Z through RELEASE.2026-04-11T03-20-12Z allows remote unauthent

CVE-2026-41145 HIGH This Week

8.8 Apr 22

Authentication bypass in MinIO object storage allows remote attackers to write arbitrary objects to any bucket using onl

CVE-2023-28433 HIGH This Week

8.8 Mar 22

Minio is a Multi-Cloud Object Storage framework. Rated high severity (CVSS 8.8), this vulnerability is remotely exploita

Same weakness CWE-774 – Allocation of File Descriptors or Handles Without Limits or Throttling

View all

CVE-2024-48848 HIGH

7.0

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

CVE-2018-1000538 vulnerability details – vuln.today

Back

Minio CVE-2018-1000538

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Minio

Same weakness CWE-774 – Allocation of File Descriptors or Handles Without Limits or Throttling

Same technique Denial Of Service

Share

External POC / Exploit Code