Product by Apache Software Foundation
Apache Commons Compress
11 known vulnerabilities in Apache Commons Compress (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-12402 | Apache Commons Compress: Infinite Loop | 7.5 | |
| High | CVE-2021-36090 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35516 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35515 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35517 | Apache Commons Compress 1.1 to 1.20 denial of service vulnerability | 7.5 | |
| Medium | CVE-2018-11771 | Apache Commons Compress: Denial of Service | 5.5 | |
| Medium | CVE-2018-1324 | Apache Commons Compress: Infinite Loop | 5.5 | |
| Not rated | CVE-2012-2098 | Apache Commons Compress: Denial of Service | — | |
| Medium | CVE-2023-42503 | Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file | 5.5 | |
| Medium | CVE-2024-26308 | Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file | 5.5 | |
| High | CVE-2024-25710 | Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file | 8.1 |