| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.commons:commons-compress | < 1.4.1 | 1.4.1 |
| commons compress | < 1.4.1 | 1.4.1 |
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free