org.apache.commons:commons-compress vulnerabilities (Maven)

11 vulnerabilities.

• org.apache.commons:commons-compress Maven Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file CVE-2024-25710 Fix available 8.1 HighFebruary 19, 2024
• org.apache.commons:commons-compress Maven Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file CVE-2024-26308 Public exploitFix available 5.5 MediumFebruary 19, 2024
• org.apache.commons:commons-compress Maven Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file CVE-2023-42503 Fix available 5.5 MediumSeptember 14, 2023
• org.apache.commons:commons-compress Maven Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• org.apache.commons:commons-compress Maven Apache Commons Compress 1.1 to 1.20 denial of service vulnerability CVE-2021-35517 Fix available EPSS 10.6% 7.5 HighJuly 13, 2021
• org.apache.commons:commons-compress Maven Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35516 Fix available EPSS 12.4% 7.5 HighJuly 13, 2021
• org.apache.commons:commons-compress Maven Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35515 Fix available EPSS 11.6% 7.5 HighJuly 13, 2021
• org.apache.commons:commons-compress Maven Denial of Service in Apache Commons Compress CVE-2019-12402 Fix available EPSS 16.2% 7.5 HighAugust 29, 2019
• org.apache.commons:commons-compress Maven Moderate severity vulnerability that affects org.apache.commons:commons-compress CVE-2018-11771 Fix available 5.5 MediumAugust 16, 2018
• org.apache.commons:commons-compress Maven Apache Commons Compress vulnerable to denial of service due to infinite loop CVE-2018-1324 Public exploitFix available 5.5 MediumMarch 16, 2018
• org.apache.commons:commons-compress Maven Uncontrolled Resource Consumption in Apache Commons Compress CVE-2012-2098 Fix available EPSS 12.8% 5.0 MediumJune 29, 2012