Junrar vulnerable to Infinite Loop

MOYENNE 5.5CVE-2018-12418 · GHSA-5xqr-grq4-qwgx · Published 14/06/2018 · updated 17/06/2026

En bref

CVE-2018-12418 est une vulnérabilité MOYENNE (CVSS 5.5) touchant com.github.junrar:junrar, junrar (junrar project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.2%, plus élevée que 67.4% des vulnérabilités.
Correctif : mettre à jour vers 1.0.1 ou plus récent.

Package	Affected versions	Patched versions
com.github.junrar:junrar Maven	`< 1.0.1`	`1.0.1`
junrar junrar_project	`< 1.0.1`	`1.0.1`

Description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

NVD description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

References

nvd.nist.gov/vuln/detail/CVE-2018-12418 · ADVISORY
junrar/junrar#8 · WEB
junrar/junrar commit ad8d0ba · WEB
GitHub Advisory GHSA-5xqr-grq4-qwgx · ADVISORY
junrar/junrar · PACKAGE

Autres vulnérabilités de com.github.junrar:junrar

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

com.github.junrar:junrar

Maven

< 1.0.1

1.0.1

junrar

junrar_project

< 1.0.1

1.0.1

Description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

NVD description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

Autres vulnérabilités de com.github.junrar:junrar

Tout voir →