Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-4980

Высокий

ALT-PU-2021-4980: package apache-commons-compress update to version 1.19-alt1_2jpp8

Источник
errata.altlinux.org
Дата публикации
12.05.2021
Дата обновления
12.05.2021
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades apache-commons-compress to version 1.19-alt1_2jpp8.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 7 лет назад

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.

CVSS3: 7.5
redhat
около 7 лет назад

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.

CVSS3: 7.5
nvd
около 7 лет назад

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.

CVSS3: 7.5
debian
около 7 лет назад

The file name encoding algorithm used internally in Apache Commons Com ...

CVSS3: 7.5
github
около 7 лет назад

Denial of Service in Apache Commons Compress