CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

Score

CVSS 3.0 7.5 High

Status

Modified - security@apache.org

Published

2019-05-06

Last modified

2024-08-05

Affected products

• Commons Imaging (Apache)

References

• https://lists.apache.org/thread.html/cd37861963aa6d2694c8947d464c99614d3e1a9db6c1a2a8b7b5840a%40%3Cdev.commons.apache.o…