Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g99m-3m46-4gm9

Опубликовано: 14 мая 2019
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Infinite Loop in Apache Sanselan

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

Пакеты

Наименование

org.apache.sanselan:sanselan

maven
Затронутые версииВерсия исправления

<= 0.97-incubator

Отсутствует

EPSS

Процентиль: 83%
0.02054
Низкий

7.5 High

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 7.5
nvd
почти 7 лет назад

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

CVSS3: 7.5
debian
почти 7 лет назад

Certain input files could make the code to enter into an infinite loop ...

EPSS

Процентиль: 83%
0.02054
Низкий

7.5 High

CVSS3

Дефекты

CWE-835