CVE-2012-2098: Medium severity apache commons compress vulnerability
Published Jun 29, 2012
·Updated
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
Affected Software
2 affected componentsFixes available
maven/org.apache.commons:commons-compress<1.4.1
1.4.1
Apache Commons Compress<1.4.1
Event History
Jun 29, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
May 13, 2022
Advisory Published
via GitHub·01:07 AM
Frequently Asked Questions
1
What is the severity of CVE-2012-2098?
CVE-2012-2098 has a medium severity level due to its potential to cause denial of service through CPU consumption.
2
How do I fix CVE-2012-2098?
To fix CVE-2012-2098, upgrade to Apache Commons Compress version 1.4.1 or later.
3
What kind of vulnerability is CVE-2012-2098?
CVE-2012-2098 is an algorithmic complexity vulnerability in the sorting algorithms of bzip2 within Apache Commons Compress.
4
Can CVE-2012-2098 be exploited remotely?
Yes, CVE-2012-2098 can be exploited remotely by attackers using specially crafted files.
5
Which software is affected by CVE-2012-2098?
CVE-2012-2098 affects Apache Commons Compress versions prior to 1.4.1.