Lucene search

K
cvelistApacheCVELIST:CVE-2018-1324
HistoryMar 16, 2018 - 12:00 a.m.

CVE-2018-1324

2018-03-1600:00:00
apache
raw.githubusercontent.com
3

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.7%

A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress’ extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress’ zip package.

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.7%