Denial of Service Vulnerability in Apache Commons Imaging by Apache
CVE-2018-17201

7.5HIGH

Key Information:

Vendor
Apache
Status
Apache Commons Imaging
Vendor
CVE Published:
6 May 2019

Summary

A Denial of Service vulnerability exists in Apache Commons Imaging, formerly known as Apache Sanselan, where specific input files can cause the code to hang indefinitely during parsing. This flaw can be exploited to disrupt service availability if the affected version is exposed to malformed files, making it a risk for users reliant on this imaging library.

Affected Version(s)

Apache Commons Imaging Apache Sanselan 0.97-incubator

References

https://lists.apache.org/thread.html/cd37861963aa6d2694c8...
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.