Uncontrolled Resource Consumption in Apache Commons Compress
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-2098US | medium5.0 | — | ||
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attac… | ||||
02
references
External citations — patches, advisories, analysis.
- http://ant.apache.org/security.htmlWEB
- http://archives.neohapsis.com/archives/bugtraq/2012-05/0130.htmlWEB
- http://commons.apache.org/compress/security.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081697.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081746.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105049.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105060.htmlWEB
- http://packetstormsecurity.org/files/113014/Apache-Commons-Compress-Apache-Ant-Denial-Of-Service.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan