CVE-2018-12418 Information

Description

Archive.java in Junrar before 1.0.1 as used in Apache Tika and other products is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

CVSS Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Reference

https://github.com/junrar/junrar/commit/ad8d0ba8e155630da8a1215cee3f253e0af45817 https://github.com/junrar/junrar/pull/8

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

5.5