Advisory ROSA-SA-2021-1941

Software: orc 0.4.26
OS: Cobalt 7.9

CVE-ID: CVE-2018-8015
CVE-Crit: HIGH
CVE-DESC: In Apache ORC 1.0.0-1.4.3, a corrupted ORC file can trigger an infinitely recursive function call in a C ++ or Java parser. The consequence of this error is likely to be a denial of service for software that uses the ORC file parser. With a C ++ parser, a stack overflow could damage the stack.
CVE-STATUS: default
CVE-REV: default