Search for packages
| purl | pkg:maven/org.apache.commons/commons-compress@1.17 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2019-12402
|
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2018-11771
|
When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-mc84-pj99-q6hh
Aliases: CVE-2021-36090 |
Improper Handling of Length Parameter Inconsistency in Compress When reading a specially crafted ZIP archive, Compress can be made to … |
Vulnerable |
|
GHSA-xqfj-vm6h-2x34
Aliases: CVE-2021-35517 |
Improper Handling of Length Parameter Inconsistency in Compress When reading a specially crafted TAR archive, Compress can be made to … |
Vulnerable |
|
GHSA-7hfm-57qf-j43q
Aliases: CVE-2021-35515 |
Excessive Iteration in Compress When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress … |
Vulnerable |
|
GHSA-crv7-7245-f45f
Aliases: CVE-2021-35516 |
Improper Handling of Length Parameter Inconsistency in Compress When reading a specially crafted 7Z archive, Compress can be made to … |
Vulnerable |
|
GHSA-4g9r-vxhx-9pgx
Aliases: CVE-2024-25710 |
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file Loop with Unreachable Exit … |
Not vulnerable |
|
CVE-2021-35517
|
Uncontrolled Resource Consumption When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory … |
Vulnerable |
|
CVE-2021-35516
|
Uncontrolled Resource Consumption When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory … |
Vulnerable |
|
CVE-2021-35515
|
Excessive Iteration When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry … |
Vulnerable |
|
GHSA-hrmr-f5m6-m9pq
Aliases: CVE-2018-11771 |
Moderate severity vulnerability that affects org.apache.commons:commons-compress When reading a specially crafted ZIP archive, the read method of Apache Commons Compress … |
Vulnerable Vulnerable |
|
GHSA-53x6-4x5p-rrvv
Aliases: CVE-2019-12402 |
Denial of Service in Apache Commons Compress The file name encoding algorithm used internally in Apache Commons Compress 1.15 to … |
Vulnerable Vulnerable |
|
CVE-2018-11771
|
Loop with Unreachable Exit Condition (Infinite Loop) When reading a specially crafted ZIP archive, the `read` method of Apache Commons … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-1324
|
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field … |