CVE-2018-8015
Apache ORC vulnerable to Uncontrolled Recursion
Résumé
Apache ORC vulnerable to Uncontrolled Recursion
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Apache ORC 1.0.0 to 1.4.3 a malformed ORC file can trigger an endlessly recursive function call in the C++ or Java parser. The impact of this bug is most likely denial-of-service against software that uses the ORC file parser. With the C++ parser, the stack overflow might possibly corrupt the stack.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Maven
org.apache.orc:orc
[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.4.4"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web orc.apache.org