Executive brief
Denial of Service in Apache Commons Compress
Affected products
- Maven org.apache.commons:commons-compress
- Maven io.github.1tchy.java9modular.org.apache.commons:commons-compress
Junglewise Threat Intelligence
CVE-2019-12402: Denial of Service in Apache Commons Compress
CVE-2019-12402 · Severity: low · CVSS 3 · Published 2019-10-11
Technologies: org.apache.commons:commons-compress (Maven). Vendors: Maven.
Related threats
- Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
- Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
- Apache Commons Compress denial of service vulnerability
- Uncontrolled Resource Consumption in Apache Commons Compress
- Improper Handling of Length Parameter Inconsistency in Compress