CVE-2018-17202

2019-05-0617:14:00

apache

www.cve.org

EPSS

0.001

Percentile

50.4%

JSON

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

CNA Affected

[
  {
    "product": "Apache Commons Imaging",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Sanselan 0.97-incubator"
      }
    ]
  }
]