CVE-2018-17202
Infinite Loop in Apache Sanselan
Résumé
Infinite Loop in Apache Sanselan
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Maven
org.apache.sanselan:sanselan
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.97-incubator"}]}]
Références
- advisory nvd.nist.gov
- web lists.apache.org