CVE-2019-12402

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs

published August 29, 2019

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16157 · 96.9th percentile
Published
2019-08-29T00:00Z
EPSS history
Timeline
  • 29 AUG 00:00Z
    The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs
    cvelistv5