GitHub Advisoryadvisory · Maven

GHSA-g99m-3m46-4gm9 Infinite Loop in Apache Sanselan

HIGH Published 2019-05-14 Modified 2021-08-03 Official page ↗
Aliases
CVE-2018-17202
Ecosystem
Maven
Packages
org.apache.sanselan:sanselan
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-835
Reviewed
2019-05-09

Affected packages

• Maven org.apache.sanselan:sanselan: <= 0.97-incubator (no fix yet)

Description

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

Related

Alias · CVE (1)

  • CVE-2018-17202 Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which… vulnerability

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References