Lucene search
GitHub Advisory DatabaseGHSA-4G9R-VXHX-9PGXHistoryFeb 19, 2024 - 9:30 a.m.
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
2024-02-1909:30:50
CWE-835
GitHub Advisory Database
github.com
12
apache commons compress
denial of service
infinite loop
dump file
vulnerability
upgrade
Loop with Unreachable Exit Condition (‘Infinite Loop’) vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.3 through 1.25.0.
Users are recommended to upgrade to version 1.26.0 which fixes the issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.apache.commons:commons-compress | lt | 1.26.0 |
Related
ubuntucve
ubuntucve
CVE-2024-25710
2024-02-19 00:00:00
debiancve
debiancve
CVE-2024-25710
2024-02-19 09:15:37
veracode
veracode
Denial Of Service (DoS)
2024-02-20 06:21:30
cgr
cgr
CVE-2024-25710 vulnerabilities
2024-05-19 03:07:16
atlassian
atlassian
Bitbucket Data Center is affected by CVE-2024-25710
2024-04-03 08:56:14
amazon
amazon
Important: apache-commons-compress
2024-03-13 20:26:00
cvelist
cvelist
openvas
openvas
Apache Commons Compress 1.3 < 1.26.0 DoS Vulnerability
2024-02-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0726-1)
2024-03-01 00:00:00
cve
cve
CVE-2024-25710
2024-02-19 09:15:37
redhatcve
redhatcve
CVE-2024-25710
2024-02-19 20:50:19
nessus
nessus
Amazon Linux 2023 : javapackages-bootstrap (ALAS2023-2024-561)
2024-03-21 00:00:00
Amazon Linux 2023 : apache-commons-compress, apache-commons-compress-javadoc (ALAS2023-2024-560)
2024-03-21 00:00:00
Amazon Linux 2 : apache-commons-compress (ALAS-2024-2493)
2024-03-18 00:00:00
redhat
redhat
osv
osv
CVE-2024-25710
2024-02-19 09:15:37
prion
prion
Design/Logic Flaw
2024-02-19 09:15:00
wolfi
wolfi
CVE-2024-25710 vulnerabilities
2024-06-02 03:07:39
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Apache Commons Compress may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2024-26308 & CVE-2024-25710)
2024-04-30 07:32:22
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00