CVE-2018-17202
Infinite Loop in Apache Sanselan
Summary
Infinite Loop in Apache Sanselan
Original description
The description as published by the source.
Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Maven
org.apache.sanselan:sanselan
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.97-incubator"}]}]
References
- advisory nvd.nist.gov
- web lists.apache.org