Executive brief
Apache Commons Compress vulnerable to denial of service due to infinite loop
Affected products
- Maven io.takari:commons-compress
- Maven com.liferay:com.liferay.portal.tools.bundle.support
- Maven org.apache.commons:commons-compress
Junglewise Threat Intelligence
CVE-2018-1324: Apache Commons Compress vulnerable to denial of service due to infinite loop
CVE-2018-1324 · Severity: low · CVSS 3 · Published 2019-03-14
Technologies: org.apache.commons:commons-compress (Maven). Vendors: Maven.
Related threats
- Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
- Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
- Apache Commons Compress denial of service vulnerability
- Uncontrolled Resource Consumption in Apache Commons Compress
- Improper Handling of Length Parameter Inconsistency in Compress