Поиск уязвимостей
Количество 7
Количество 7
CVE-2018-1324
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.
CVE-2018-1324
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.
CVE-2018-1324
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.
CVE-2018-1324
A specially crafted ZIP archive can be used to cause an infinite loop ...
GHSA-h436-432x-8fvx
Apache Commons Compress vulnerable to denial of service due to infinite loop
BDU:2021-01429
Уязвимость реализации классов ZipFile и ZipArchiveInputStream набора инструментов для сжатия Commons Compress, связанная с бесконечной работой цикла, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2018-3720
ALT-PU-2018-3720: package `apache-commons-compress` update to version 1.16.1-alt1_1jpp8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-1324 A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package. | CVSS3: 5.5 | 4% Низкий | больше 8 лет назад |
 | CVE-2018-1324 A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package. | CVSS3: 7.5 | 4% Низкий | больше 8 лет назад |
 | CVE-2018-1324 A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package. | CVSS3: 5.5 | 4% Низкий | больше 8 лет назад |
| CVE-2018-1324 A specially crafted ZIP archive can be used to cause an infinite loop ... | CVSS3: 5.5 | 4% Низкий | больше 8 лет назад |
| GHSA-h436-432x-8fvx Apache Commons Compress vulnerable to denial of service due to infinite loop | CVSS3: 5.5 | 4% Низкий | больше 7 лет назад |
 | BDU:2021-01429 Уязвимость реализации классов ZipFile и ZipArchiveInputStream набора инструментов для сжатия Commons Compress, связанная с бесконечной работой цикла, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 4% Низкий | почти 9 лет назад |
| ALT-PU-2018-3720 ALT-PU-2018-3720: package `apache-commons-compress` update to version 1.16.1-alt1_1jpp8 | CVSS3: 6.5 | 4% Низкий | больше 8 лет назад |
Уязвимостей на страницу