CVE-2018-1324

A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and…

published March 16, 2018

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03656 · 89.5th percentile
Published
2018-03-16T13:00Z
EPSS history
Timeline
  • 16 MAR 13:00Z
    A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and…
    cvelistv5