What is GHSA-g99m-3m46-4gm9?

GHSA-g99m-3m46-4gm9 is a security advisory published by GitHub Security Advisories with High severity. Infinite Loop in Apache Sanselan

Which CVE IDs does GHSA-g99m-3m46-4gm9 cover?

GHSA-g99m-3m46-4gm9 covers the following CVE IDs: CVE-2018-17202. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g99m-3m46-4gm9?

GHSA-g99m-3m46-4gm9 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-g99m-3m46-4gm9?

GHSA-g99m-3m46-4gm9 affects 1 product, including: maven/org.apache.sanselan:sanselan:\u003c= 0.97-incubator.

GHSA-g99m-3m46-4gm9HighCVSS 7.5

Infinite Loop in Apache Sanselan

Vendor

GitHub Security Advisories

Published

May 14, 2019

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2018-17202 →

📋 Description

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

🎯 Affected products1

maven/org.apache.sanselan:sanselan:<= 0.97-incubator

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2018-17202
https://lists.apache.org/thread.html/69204376d12205b0d2d90e6fcbeebb99b894e6db88c8ff565c4e1efa@%3Cdev.commons.apache.org%3E
https://github.com/advisories/GHSA-g99m-3m46-4gm9