Junrar vulnerable to Infinite Loop

보통 5.5CVE-2018-12418 · GHSA-5xqr-grq4-qwgx · Published 14/06/2018 · updated 17/06/2026

요약

CVE-2018-12418은(는) com.github.junrar:junrar, junrar (junrar project)에 영향을 주는 보통 (CVSS 5.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.2%, 전체 취약점의 67.4%보다 높음.
조치: 1.0.1 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
com.github.junrar:junrar Maven	`< 1.0.1`	`1.0.1`
junrar junrar_project	`< 1.0.1`	`1.0.1`

Description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

NVD description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

References

nvd.nist.gov/vuln/detail/CVE-2018-12418 · ADVISORY
junrar/junrar#8 · WEB
junrar/junrar commit ad8d0ba · WEB
GitHub Advisory GHSA-5xqr-grq4-qwgx · ADVISORY
junrar/junrar · PACKAGE

com.github.junrar:junrar의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

com.github.junrar:junrar

Maven

< 1.0.1

1.0.1

junrar

junrar_project

< 1.0.1

1.0.1

Description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

NVD description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

com.github.junrar:junrar의 다른 취약점

모두 보기 →