UpHeron
All vulnerabilities

Servers and applications

CVE-2018-1000538

Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-(pre)signed requests with large bodies . This vulnerability appears to have been fixed in after commit…

Severity
High 7.5
Published
26 Jun 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2018-05-16t23-35-33z
Exploit chance
1.5% in the next 30 daysHigher than 74% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
MinIOServers and applications · cpe:a:minio:minio
  • Every version before 2018-05-16t23-35-33z

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-1000538
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-1000538