Junrar vulnerable to Infinite Loop

MEDIO 5.5CVE-2018-12418 · GHSA-5xqr-grq4-qwgx · Published 14/06/2018 · updated 17/06/2026

En resumen

CVE-2018-12418 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a com.github.junrar:junrar, junrar (junrar project).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 67.4% de las vulnerabilidades.
Solución: actualizar a 1.0.1 o posterior.

Package	Affected versions	Patched versions
com.github.junrar:junrar Maven	`< 1.0.1`	`1.0.1`
junrar junrar_project	`< 1.0.1`	`1.0.1`

Description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

NVD description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

References

nvd.nist.gov/vuln/detail/CVE-2018-12418 · ADVISORY
junrar/junrar#8 · WEB
junrar/junrar commit ad8d0ba · WEB
GitHub Advisory GHSA-5xqr-grq4-qwgx · ADVISORY
junrar/junrar · PACKAGE

Más vulnerabilidades de com.github.junrar:junrar

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

com.github.junrar:junrar

Maven

< 1.0.1

1.0.1

junrar

junrar_project

< 1.0.1

1.0.1

Description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

NVD description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

Más vulnerabilidades de com.github.junrar:junrar

Ver todo →