Vulnerability GHSA-5xqr-grq4-qwgx
Medium Risk
MEDIUM RISK
CVSS Score: 5.5
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
8 years ago
October 17, 2018 at 12:04 AM UTC
Junrar vulnerable to Infinite Loop
0.7 - 1.0.0
0.7 - 1.0.0
Summary
Junrar vulnerable to Infinite Loop
Details
Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
6 hours ago
Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction
0.7 - 7.6.0 GHSA-h9h9-2rmf-rvhp
0.7 - 7.6.0 GHSA-h9h9-2rmf-rvhp
Low Risk
28 days ago
Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root
0.7 - 7.6.0 GHSA-89m4-43j5-vhhx
0.7 - 7.6.0 GHSA-89m4-43j5-vhhx
Medium Risk
6 months ago
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix
0.7 - 7.5.9 GHSA-hf5p-q87m-crj7
0.7 - 7.5.9 GHSA-hf5p-q87m-crj7
Medium Risk
7 months ago
Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix
0.7 - 7.5.7 GHSA-j273-m5qq-6825
0.7 - 7.5.7 GHSA-j273-m5qq-6825
High Risk
4 years ago
Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive
0.7 - 7.4.0 GHSA-m6cj-93v6-cvr5
0.7 - 7.4.0 GHSA-m6cj-93v6-cvr5
Impacted packages
Timeline
Published
8 years ago
October 17, 2018 at 12:04 AM UTC
Fixed (1.0.1)
Unknown
Unknown
Last Modified
2 years ago
November 08, 2023 at 03:59 AM UTC