CVE-2018-12418: Medium severity Junrar Project Junrar vulnerability
Published Jun 14, 2018
·Updated
Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.
Affected Software
1 affected component
Junrar Project Junrar<1.0.1
Remediation
Event History
Jun 14, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-12418?
CVE-2018-12418 has a denial of service severity level due to potential infinite loops when processing corrupt RAR files.
2
How do I fix CVE-2018-12418?
To fix CVE-2018-12418, upgrade Junrar to version 1.0.1 or higher.
3
Which versions of Junrar are affected by CVE-2018-12418?
CVE-2018-12418 affects all versions of Junrar prior to 1.0.1.
4
What impact does CVE-2018-12418 have on applications using Junrar?
CVE-2018-12418 can cause applications using Junrar to enter an infinite loop and become unresponsive when handling corrupt RAR files.
5
Is CVE-2018-12418 related to Apache Tika?
Yes, CVE-2018-12418 affects Junrar, which is used in Apache Tika, making Tika vulnerable to this denial of service issue.