Lucene search
+L

21 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 3:22 a.m.•14 views

CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS7.3AI score0.01931EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2019/05/14 4:01 a.m.•32 views

GHSA-RJX9-2936-9FFX Improper Input Validation in Apache Sanselan

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.9AI score0.01931EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2019/05/14 4:01 a.m.•42 views

Improper Input Validation in Apache Sanselan

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS3.2AI score0.01931EPSS
SaveExploits0References3Affected Software1
vulnersOsv
vulnersOsv
•added 2019/05/14 4:01 a.m.•4 views

br.net.woodstock.rockframework:rockframework-core (>=1.2.1, <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0, <=5.5.0) +84 more potentially affected by CVE-2018-17201 via org.apache.sanselan:sanselan (0.97-incubator)

org.apache.sanselan:sanselan MAVEN version 0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha, =0.4....

7.5CVSS0.01931EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2019/05/14 4:01 a.m.•4 views

br.net.woodstock.rockframework:rockframework-core (>=1.2.1, <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0, <=5.5.0) +84 more potentially affected by CVE-2018-17201 via org.apache.sanselan:sanselan (0.97-incubator)

org.apache.sanselan:sanselan MAVEN version 0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha, =0.4....

7.5CVSS0.01931EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2019/05/14 4:00 a.m.•10 views

GHSA-G99M-3M46-4GM9 Infinite Loop in Apache Sanselan

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.9AI score0.01931EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2019/05/14 4:00 a.m.•58 views

Infinite Loop in Apache Sanselan

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS3.7AI score0.01931EPSS
SaveExploits0References3Affected Software1
vulnersOsv
vulnersOsv
•added 2019/05/14 4:00 a.m.•2 views

br.net.woodstock.rockframework:rockframework-core (>=1.2.1, <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0, <=5.5.0) +84 more potentially affected by CVE-2018-17202 via org.apache.sanselan:sanselan (0.97-incubator)

org.apache.sanselan:sanselan MAVEN version 0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha, =0.4....

7.5CVSS0.01931EPSS
SaveExploits0
Prion
Prion
•added 2019/05/06 6:29 p.m.•26 views

Code injection

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

5CVSS7.4AI score0.01931EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/05/06 6:29 p.m.•27 views

Code injection

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

5CVSS7.4AI score0.01931EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2019/05/06 6:29 p.m.•18 views

CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.8AI score0.01931EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/05/06 6:29 p.m.•23 views

CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.8AI score0.01931EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/05/06 5:14 p.m.•51 views

CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5AI score0.01931EPSS
SaveExploits0References1
CVE
CVE
•added 2019/05/06 5:14 p.m.•104 views

CVE-2018-17202

CVE-2018-17202 affects Apache Sanselan (incubating), later renamed Apache Commons Imaging. The issue is an infinite-loop DoS triggered when parsing certain input files, leading to potential denial of service. Supported by multiple connected records (Red Hat, Veracode, GHSA, OSV, CVE/NVD) that des...

7.5CVSS7.4AI score0.01931EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2019/05/06 5:14 p.m.•21 views

CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

8.7CVSS0.01931EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/05/06 5:07 p.m.•58 views

CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5AI score0.01931EPSS
SaveExploits0References1
CVE
CVE
•added 2019/05/06 5:07 p.m.•101 views

CVE-2018-17201

CVE-2018-17201 arises from DoS via crafted input files when parsed by Apache Sanselan (0.97-incubator), now Apache Commons Imaging. The code hang leads to partial availability impact as described in NVD metrics; affected component is the image parsing library. Several connected records reiterate ...

7.5CVSS7.4AI score0.01931EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2019/05/06 5:07 p.m.•6 views

CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

8.7CVSS0.01931EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/06 12:00 a.m.•10 views

CVE-2018-17202: Loop with Unreachable Exit Condition

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.8AI score0.01931EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/06 12:00 a.m.•5 views

CVE-2018-17201: Undefined Security Weakness

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.8AI score0.01931EPSS
SaveExploits0References1
Rows per page
Query Builder