GHSA-M6CJ-93V6-CVR5 Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive

Impact A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. Patches The problem is partially patched in 7.4.1 Workarounds None References...

Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive

Impact A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. Patches The problem is partially patched in 7.4.1 Workarounds None References...

Junrar 安全漏洞

Junrar is a general Java Unrar library. It is used to read and extract .Rar files. Junrar suffers from a security vulnerability that originates from an infinite loop triggered by building a RAR archive...

GHSA-5XQR-GRQ4-QWGX Junrar vulnerable to Infinite Loop

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

Junrar vulnerable to Infinite Loop

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

Denial Of Service (DoS)

junrar is vulnerable to denial of service DoS attacks. The vulnerability exists due to an infinite loop that can occur when handling RAR files which has long headers...

CVE-2018-12418

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

Junrar denial of service vulnerability

Junrar is a use of the Java language written in the .rar file used to extract the contents of the open source library . A security vulnerability exists in the Archive.java file in Junrar versions prior to 1.0.1. An attacker can exploit this vulnerability to cause a denial of service infinite loop...

Denial of service

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

CVE-2018-12418

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

CVE-2018-12418

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

CVE-2018-12418

CVE-2018-12418 affects Junrar before 1.0.1 and is triggered by processing corrupt RAR files in Archive.java, used by Apache Tika and other products. The vulnerability allows a denial-of-service via an infinite loop, with the root cause in Archive.java. In practice, exploitation could occur when a...