Archive

16 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /16 April 2018 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.5

CVE-2018-1324 Public exploit

Apache Commons Compress vulnerable to denial of service due to infinite loop

A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack ag…

Apache Software Foundation Apache Commons Compress libcommons-compress-java org.apache.commons:commons-compress Debian Ubuntu Maven

Mar 16, 2018