Description
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue.
References (4)
Scores
CVSS v3
8.1
EPSS
0.0002
EPSS Percentile
4.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-835
Status
published
Products (2)
apache/commons_compress
1.3 - 1.26.0
org.apache.commons/commons-compress
1.3 - 1.26.0Maven
Published
Feb 19, 2024
Tracked Since
Feb 18, 2026