Skip to content

Vulnerabilities of Apache Software Foundation Apache Commons Compress

Is your version affected?

CVE Summary Score Published
CVE-2024-25710 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects… 8.1 High Feb 19, 2024
CVE-2024-26308 Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects… Not rated Feb 19, 2024
CVE-2023-42503 Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR… Not rated Sep 14, 2023
CVE-2021-36090 When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally… Not rated Jul 13, 2021
CVE-2021-35517 When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally… Not rated Jul 13, 2021
CVE-2021-35516 When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads… Not rated Jul 13, 2021
CVE-2021-35515 When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can… Not rated Jul 13, 2021
CVE-2019-12402 The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop… Not rated Aug 29, 2019
CVE-2018-11771 When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's… Not rated Aug 16, 2018
CVE-2018-1324 A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field… Not rated Mar 16, 2018

Other Apache Software Foundation products