Executive brief
Apache Commons Compress denial of service vulnerability
Affected products
- Maven org.apache.commons:commons-compress
Junglewise Threat Intelligence
CVE-2023-42503: Apache Commons Compress denial of service vulnerability
CVE-2023-42503 · Severity: low · CVSS 3.1 · Published 2023-09-14
Technologies: org.apache.commons:commons-compress (Maven). Vendors: Maven.
Related threats
- Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
- Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
- Uncontrolled Resource Consumption in Apache Commons Compress
- Improper Handling of Length Parameter Inconsistency in Compress
- Improper Handling of Length Parameter Inconsistency in Compress