Uncontrolled Resource Consumption in Apache Commons Compress
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-2098US | medium5.0 | — | ||
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attac… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://ant.apache.org/security.htmlWEB
- http://archives.neohapsis.com/archives/bugtraq/2012-05/0130.htmlWEB
- http://commons.apache.org/compress/security.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081697.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081746.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105049.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105060.htmlWEB
- http://packetstormsecurity.org/files/113014/Apache-Commons-Compress-Apache-Ant-Denial-Of-Service.htmlWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan