CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

Score

CVSS 3.0 7.5 High

Status

Modified - security@apache.org

Published

2019-05-06

Last modified

2024-08-05

Weaknesses

CWE-835

Affected products

• Commons Imaging (Apache)

References

• https://lists.apache.org/thread.html/69204376d12205b0d2d90e6fcbeebb99b894e6db88c8ff565c4e1efa%40%3Cdev.commons.apache.o…