CVE-2018-11771

🗓️ 16 Aug 2018 15:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 143 Views

Apache Commons Compress 1.7 to 1.17 ZIP ArchiveInputStream vulnerability

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Commons Compress may affect IBM Cloud App Management V2018	3 May 201915:45	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Commons Compress affects IBM InfoSphere Information Server connectivity componets	6 Dec 201919:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	20 May 202014:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Network Performance Insight (CVE-2018-11771)	12 Nov 201803:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	19 Apr 202116:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics	2 Nov 202017:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics	29 Apr 202501:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities	1 Feb 202406:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open Source used in IBM Cloud Pak System	7 Jul 202016:58	–	ibm

NVD

Vulners

Node

apache commons_compressRange1.7.0–1.17.0

Node

oracle weblogic_serverMatch14.1.1.0.0

[
  {
    "product": "Apache Commons Compress",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.7 to 1.17"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/714c6ac1b1b50f8557e7342903ef45f1538a7bc60a0b47d6e48c273d%40%3Ccommits.tinkerpop.apache.org%3E
lists	www.lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
lists	www.lists.apache.org/thread.html/b8ef29df0f1d55aa741170748352ae8e425c7b1d286b2f257711a2dd%40%3Cdev.creadur.apache.org%3E
lists	www.lists.apache.org/thread.html/6c79965066c30d4e330e04d911d3761db41b82c89ae38d9a6b37a6f1%40%3Cdev.tinkerpop.apache.org%3E
lists	www.lists.apache.org/thread.html/c7954dc1e8fafd7ca1449f078953b419ebf8936e087f235f3bd024be%40%3Ccommits.tinkerpop.apache.org%3E
securityfocus	www.securityfocus.com/bid/105139
lists	www.lists.apache.org/thread.html/eeecc1669242b28a3777ae13c68b376b0148d589d3d8170340d61120%40%3Cdev.tinkerpop.apache.org%3E
lists	www.lists.apache.org/thread.html/b8da751fc0ca949534cdf2744111da6bb0349d2798fac94b0a50f330%40%3Cannounce.apache.org%3E
securitytracker	www.securitytracker.com/id/1041503
lists	www.lists.apache.org/thread.html/35f60d6d0407c13c39411038ba1aca71d92595ed7041beff4d07f2ee%40%3Ccommits.tinkerpop.apache.org%3E

21 Nov 2024 03:43Current

5.3Medium risk

Vulners AI Score5.3

CVSS 24.3

CVSS 3.15.5

EPSS0.01115

CWE-835