apache-commons-compress: denial of service
| Package(s): | apache-commons-compress | CVE #(s): | CVE-2012-2098 | ||||||||||||||||||||
| Created: | June 4, 2012 | Updated: | February 13, 2014 | ||||||||||||||||||||
| Description: | From the CVE entry:
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs. Fixed in version 1.4.1. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||