PT-2017-4078 · Apache · Apache Commons Compress

Publicado 2017-12-07 · Atualizado 2022-04-18 · CVE-2018-1324

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.11 through 1.15

Description A specially crafted ZIP archive can cause an infinite loop inside Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes. This can be used to mount a denial of service attack against services that use Compress' zip package.

Recommendations For versions 1.11 through 1.15, consider disabling the ZipFile and ZipArchiveInputStream classes until a patch is available to prevent potential denial of service attacks. As a temporary workaround, restrict the use of ZIP archives from untrusted sources to minimize the risk of exploitation.

Exploit

Correção

DoS

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

BDU:2021-01429

CVE-2018-1324

GHSA-H436-432X-8FVX

MGASA-2019-0001

Produtos afetados

Apache Commons Compress

Referências · 34

• 🔥 https://github.com/tafamace/CVE-2018-1324 · Exploit
• 🔥 https://github.com/jensdietrich/xshady-release/tree/main/CVE-2018-1324 · Exploit
• https://github.com/apache/commons-compress · Nota
• https://github.com/apache/commons-compress/commit/2a2f1dc48e22a34ddb72321a4db211da91aa933b · Nota
• https://ubuntu.com/security/CVE-2018-1324 · Aviso do Fabricante
• https://arxiv.org/pdf/2306.05534.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1324 · Nota de Segurança
• https://lists.apache.org/thread.html/1c7b6df6d1c5c8583518a0afa017782924918e4d6acfaf23ed5b2089@%3Cdev.commons.apache.org%3E · Nota
• https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UJ7GKBUCVEHQVGOXIOT6EWCRVDZJMHGK · Aviso do Fabricante
• https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1324 · Nota
• https://lists.apache.org/thread.html/r5532dc8d5456b5151e8c286801e2e5769f5c04118b29c3b5d13ea387@%3Cissues.beam.apache.org%3E · Nota
• https://lists.apache.org/thread.html/b8ef29df0f1d55aa741170748352ae8e425c7b1d286b2f257711a2dd%40%3Cdev.creadur.apache.org%3E · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-1324 · Aviso do Fabricante