Resource exhaustion in Jenkins and Jenkins LTS - CVE-2022-0538

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources. A remote authenticated attacker can use specially crafted XML files, trigger resource exhaustion and perform a denial of service (DoS) attack.

Affected software

How to mitigate CVE-2022-0538

External References

• https://www.jenkins.io/security/advisory/2022-02-09/#SECURITY-2602
• http://www.openwall.com/lists/oss-security/2022/02/09/1

Related Security Bulletins

• Multiple vulnerabilities in Jenkins and Jenkins LTS