Lucene search

K
osvGoogleOSV:CVE-2022-24615
HistoryFeb 24, 2022 - 3:15 p.m.

CVE-2022-24615

2022-02-2415:15:29
Google
osv.dev
3
zip4j library
denial of service
zip parsing

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

25.0%

zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

25.0%