libcommons-compress-java vulnerabilities — 13 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
5.5 medium Infinite Loop Vulnerability in Apache Commons Compress (CVE-2024-25710) libcommons-compress-java Debian 19 Feb 2024 No fix published
7.5 high Denial of Service Vulnerability in libcommons-compress-java: Infinite Loop in 7Z Archive Handling libcommons-compress-java Debian 13 Jul 2021 No fix published
7.5 high Denial of Service Vulnerability in libcommons-compress-java: Memory Allocation Issue libcommons-compress-java Debian 13 Jul 2021 No fix published
7.5 high Denial of Service Vulnerability in libcommons-compress-java: Memory Allocation Issue libcommons-compress-java Debian 13 Jul 2021 No fix published
7.5 high Denial of Service Vulnerability in libcommons-compress-java: Memory Allocation Issue libcommons-compress-java Debian 13 Jul 2021 No fix published
7.5 high Infinite Loop Denial of Service Vulnerability in libcommons-compress-java libcommons-compress-java Debian 30 Aug 2019 1.18-3
Unrated Denial of Service Vulnerability in libcommons-compress-java: Infinite Loop Risk libcommons-compress-java Debian 30 Aug 2019 1.18-3
5.5 medium Denial of Service Vulnerability in Apache Commons Compress - libcommons-compress-java libcommons-compress-java Debian 16 Aug 2018 1.18-1
Unrated Denial of Service Vulnerability in libcommons-compress-java: Improper EOF Handling in ZIP Archives libcommons-compress-java Debian 16 Aug 2018 1.18-1
5.5 medium Denial of Service Vulnerability in Apache Commons Compress (CVE-2018-1324) libcommons-compress-java Debian 16 Mar 2018 1.13-2
Unrated Denial of Service Vulnerability in libcommons-compress-java: Infinite Loop in ZIP Archive Parsing libcommons-compress-java Debian 16 Mar 2018 1.13-2
Unrated Algorithmic complexity vulnerability in bzip2 compressing stream libcommons-compress-java Debian 29 Jun 2012 1.4.1-1
Unrated Denial of Service Vulnerability in Apache Commons Compress: libcommons-compress-java libcommons-compress-java Debian 29 Jun 2012 1.4.1-1
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.