Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
CVE-2012-2098
Good to know:
Date: June 28, 2012
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
Language: Java
Severity Score
Related Resources (39)
Severity Score
Top Fix
Upgrade Version
Upgrade to version sellerbox/phpjasper - no_fix;ziack/jasperphp - dev-master;ziack/jasperphp - no_fix;ziack/jasperphp - 2.8.0;silverstripe/fulltextsearch-extract - no_fix;drsoft/laraveljasper - no_fix;mgf-formatter - no_fix;minkbear/phpjasper - no_fix;copam/phpjasper - 1.4;copam/phpjasper - v1.5;copam/phpjasper - no_fix;smart145/phpjasper - 3.3.2;smart145/phpjasper - 3.3.0;smart145/phpjasper - 3.0.1;smart145/phpjasper - v1.11;smart145/phpjasper - 2.0;smart145/phpjasper - dev-add-missing;smart145/phpjasper - no_fix;smart145/phpjasper - dev-century_gothic_font;smart145/phpjasper - v1.5;smart145/phpjasper - v1.1;smart145/phpjasper - v1.8;smart145/phpjasper - dev-master;vufind/vufind - dev-legacy/lbs4-daia;vufind/vufind - dev-pullrequest_accessib_turn-my-account-menu-into-ul;vufind/vufind - dev-release-5.0;vufind/vufind - v3.1;vufind/vufind - dev-legacy/mink-autoretry;muhammettotan/phpjasper - no_fix;geekcom/phpjasper-laravel - no_fix;xidmonx/jasperphp - 2.7.0;xidmonx/jasperphp - no_fix;i4n/phpjasper - 1.1.0;fgbio - 0.2.0;fgbio - 0.4.0;lavela/phpjasper - dev-master;lavela/phpjasper - v2.0;scribe/cssembed-library - no_fix;penblu/jasperphp - no_fix;pyreportjasper - no_fix;anshul-netgen/jasper-report - no_fix;dstecnologias/phpjasper - no_fix;igv - 2.8.0;stradaaccellog/phpjasper - v1.0;rdpascua/jasperstarter - dev-master;rdpascua/jasperstarter - 3.5.0;rdpascua/jasperstarter - no_fix;lopezsoft/jasperphp - no_fix;davidecaruso/jasper-php - v1.0.0;davidecaruso/jasper-php - no_fix;a.ambrogini/phpjasper - v2.6;a.ambrogini/phpjasper - no_fix;a.ambrogini/phpjasper - v1.1;geekcom/phpjasper - no_fix;geekcom/phpjasper - v1.0;igvtools - 2.14.1;gomoob/php-embedded-mongo - no_fix;smartman/swedbank-gateway - no_fix;erw/phpjasperstarter - no_fix;eoulsan - 2.3;eoulsan - 2.5;eihen/jasperstarter-bin - v3.4.1.0;chrmorandi/yii2-jasper - v1.1.1;stesabvba/horizon - no_fix;cossou/jasperphp - no_fix;dericktan/phpjasper - no_fix;fazo96/jasperphp - no_fix;siu-toba/jasper - no_fix;salesfusion/reporter - 1.1.4;nealis/jasperphp - no_fix;dhenyson/jasper-report-php - no_fix;davehensley/highcharts - highstock-v1.0.1;starkliew/jasperphp - no_fix;copam/phpjasper7 - v1.3;rdpascua/reporter - no_fix;scribe/closurecompiler-library - no_fix;jheferson-br/phpjasper - no_fix;openrefine - 3.5.0;lijian0960/advanced-bui - no_fix;org.codehaus.izpack:izpack-maven-plugin:5.0.0-beta1;ant:ant:no_fix;ant:ant:no_fix;org.apache.ant:ant:1.8.4;org.apache.ant:ant:1.8.4;org.jboss.teiid.connectors:connector-ws:no_fix;org.apache.commons:commons-compress:1.4.1;org.codehaus.izpack:izpack-standalone-compiler:no_fix;org.jboss:eap-installer:no_fix;org.apache.servicemix.bundles:org.apache.servicemix.bundles.ant:1.8.1_1
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | NONE |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | NONE |
| Integrity (I): | NONE |
| Availability (A): | LOW |
CVSS v2
| Base Score: |
|
|---|---|
| Access Vector (AV): | NETWORK |
| Access Complexity (AC): | LOW |
| Authentication (AU): | NONE |
| Confidentiality (C): | NONE |
| Integrity (I): | NONE |
| Availability (A): | PARTIAL |
| Additional information: |