CVE-2021-35517

A flaw was found in apache-commons-compress. When reading a specially crafted TAR archive, Compress can allocate large amounts of memory that leads to an out-of-memory error for small inputs. This flaw allows the mounting of a denial of service attack against services that use Compress' TAR...

CVE-2021-35515

A flaw was found in apache-commons-compress. When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This flaw allows the mounting of a denial of service attack against services that use Compress' SevenZ package...

AZL-45081 CVE-2021-35515 affecting package apache-commons-compress 1.19-3

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

AZL-45411 CVE-2021-36090 affecting package apache-commons-compress 1.19-3

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package...

AZL-44490 CVE-2021-35517 affecting package apache-commons-compress 1.19-3

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package...

AZL-45144 CVE-2021-35516 affecting package apache-commons-compress 1.19-3

When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

CVE-2021-36090 Apache Commons Compress 1.0 to 1.20 denial of service vulnerability

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package...

CVE-2021-35517 Apache Commons Compress 1.1 to 1.20 denial of service vulnerability

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package...

CVE-2021-35516 Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

CVE-2021-35515 Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

PT-2021-3726

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.19 through 1.21 Confluence Data Center versions from 7.19.23 to 8.9.3 Confluence Data Center versions from 8.5.10 to 8.5.11 Confluence Server versions from 7.19.23 to 7.19.24 Confluence Server versions from...

Apache Commons Compress 安全漏洞

Apache Commons Compress is a library from the Apache USA Foundation for processing compressed files. A security vulnerability exists in Apache Commons Compress, which stems from the fact that constructing a list of decoders to decompress entries may result in an infinite loop when reading a...

Apache Commons Compress 安全漏洞

Apache Commons Compress is a library for processing compressed files from the Apache USA Foundation. A security vulnerability exists in Apache Commons Compress that stems from the fact that when reading specially designed TAR archives, Compress can allocate a large amount of memory, resulting in ...

PT-2021-3993

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions prior to the fixed version Confluence Data Center versions from 7.19.23 through 8.9.3 Confluence Data Center versions from 8.5.10 through 8.5.11 Confluence Server versions from 7.19.23 through 7.19.24 Confluenc...

Apache Commons Compress 安全漏洞

A resource management error vulnerability exists in Apache Commons Compress, a library for processing compressed files from the Apache Foundation, which stems from the fact that when reading a specially crafted 7Z archive, Compress can allocate a large amount of memory, resulting in an...

PT-2021-3725

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.19 through 1.21 Apache Commons Compress version 1.22 Confluence Data Center versions from 7.19.23 to 8.9.3 Confluence Data Center versions from 8.5.10 to 8.5.11 Confluence Server versions from 7.19.23 to...

Apache Commons Compress 安全漏洞

Apache Commons Compress is a library for processing compressed files from the Apache USA Foundation. A security vulnerability exists in Apache Commons Compress that stems from the fact that when reading specially designed ZIP archives, Compress can allocate a large amount of memory, which can lea...

PT-2021-3850

Name of the Vulnerable Software and Affected Versions Confluence Data Center versions 7.19.23 through 8.9.3 Confluence Server versions 7.19.23 through 8.5.11 Apache Commons Compress affected versions not specified Description The issue is related to the allocation of unlimited memory when reading...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Commons IO

Summary A vulnerability in Apache Commons IO that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2021-29425 DESCRIPTION: Apache Commons IO could allow a remote attacker to traverse directories on the system, caused by improper input validation by the...

apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...