Junrar vulnerable to Infinite Loop

MÉDIO 5.5CVE-2018-12418 · GHSA-5xqr-grq4-qwgx · Published 14/06/2018 · updated 17/06/2026

Em resumo

CVE-2018-12418 é uma vulnerabilidade MÉDIO (CVSS 5.5) que afeta com.github.junrar:junrar, junrar (junrar project).
Chance de exploração nos próximos 30 dias (EPSS): 1.2%, maior que 67.4% das vulnerabilidades.
Correção: atualize para 1.0.1 ou posterior.

Package	Affected versions	Patched versions
com.github.junrar:junrar Maven	`< 1.0.1`	`1.0.1`
junrar junrar_project	`< 1.0.1`	`1.0.1`

Description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

NVD description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

References

nvd.nist.gov/vuln/detail/CVE-2018-12418 · ADVISORY
junrar/junrar#8 · WEB
junrar/junrar commit ad8d0ba · WEB
GitHub Advisory GHSA-5xqr-grq4-qwgx · ADVISORY
junrar/junrar · PACKAGE

Mais vulnerabilidades de com.github.junrar:junrar

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

com.github.junrar:junrar

Maven

< 1.0.1

1.0.1

junrar

junrar_project

< 1.0.1

1.0.1

Description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

NVD description

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

Mais vulnerabilidades de com.github.junrar:junrar

Ver tudo →