~ / search / GHSA-g99m-3m46-4gm9

GHSA-g99m-3m46-4gm9

Infinite Loop in Apache Sanselan

Source: GitHub Advisory Database (reviewed) High CVE-2018-17202

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.sanselan:sanselan <= 0.97-incubator no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

References

External links from the advisory. They lead to third-party sites.