443 matches found
[SECURITY] Fedora 17 Update: apache-commons-compress-1.4.1-1.fc17
The code in this component came from Avalon's Excalibur, but originally from Ant, as far as life in Apache goes. The tar package is originally Tim Endres' public domain package. The bzip2 package is based on the work done by Keiron Liddle. It has migrated via: Ant - Avalon-Excalibur - Commons-IO ...
5CVSS2.7AI score0.12608EPSS
SaveExploits1
Apache Commons Compress和Apache Ant拒绝服务漏洞
BUGTRAQ ID: 53676 CVE ID: CVE-2012-2098 Apache Commons Compress库定义了一个API,可处理ar、cpio、Unix dump、tar、zip、gzip、XZ、Pack200、bzip2文件。Apache Ant,是一个将软件编译、测试、部署等步骤联系在一起加以自动化的一个工具,大多用于Java环境中的软件开发。 Apache Commons Compress 1.4.1之前版本在使用bzip2压缩文件时存在安全漏洞,可通过发送到BZip2CompressorOutputStream类的特制文件利用此漏洞消耗系统资源,造成拒绝服...
5CVSS2.1AI score0.12608EPSS
SaveExploits1
20