CVE-2018-17202

CVE-2018-17202 affects Apache Sanselan (incubating), later renamed Apache Commons Imaging. The issue is an infinite-loop DoS triggered when parsing certain input files, leading to potential denial of service. Supported by multiple connected records (Red Hat, Veracode, GHSA, OSV, CVE/NVD) that des...

CVE-2018-17201

CVE-2018-17201 arises from DoS via crafted input files when parsed by Apache Sanselan (0.97-incubator), now Apache Commons Imaging. The code hang leads to partial availability impact as described in NVD metrics; affected component is the image parsing library. Several connected records reiterate ...