CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1324

A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 51.1%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2018-1324

Apache » Commons Compress » Version: 1.11

cpe:2.3:a:apache:commons_compress:1.11
Apache » Commons Compress » Version: 1.12

cpe:2.3:a:apache:commons_compress:1.12
Apache » Commons Compress » Version: 1.13

cpe:2.3:a:apache:commons_compress:1.13
Apache » Commons Compress » Version: 1.14

cpe:2.3:a:apache:commons_compress:1.14
Apache » Commons Compress » Version: 1.15

cpe:2.3:a:apache:commons_compress:1.15
Oracle » Mysql Cluster » Version: N/A

cpe:2.3:a:oracle:mysql_cluster:-
Oracle » Mysql Cluster » Version: 7.2.0

cpe:2.3:a:oracle:mysql_cluster:7.2.0
Oracle » Mysql Cluster » Version: 7.2.1

cpe:2.3:a:oracle:mysql_cluster:7.2.1
Oracle » Mysql Cluster » Version: 7.2.10

cpe:2.3:a:oracle:mysql_cluster:7.2.10
Oracle » Mysql Cluster » Version: 7.2.12

cpe:2.3:a:oracle:mysql_cluster:7.2.12
Oracle » Mysql Cluster » Version: 7.2.13

cpe:2.3:a:oracle:mysql_cluster:7.2.13
Oracle » Mysql Cluster » Version: 7.2.14

cpe:2.3:a:oracle:mysql_cluster:7.2.14
Oracle » Mysql Cluster » Version: 7.2.15

cpe:2.3:a:oracle:mysql_cluster:7.2.15
Oracle » Mysql Cluster » Version: 7.2.16

cpe:2.3:a:oracle:mysql_cluster:7.2.16
Oracle » Mysql Cluster » Version: 7.2.17

cpe:2.3:a:oracle:mysql_cluster:7.2.17
Oracle » Mysql Cluster » Version: 7.2.18

cpe:2.3:a:oracle:mysql_cluster:7.2.18
Oracle » Mysql Cluster » Version: 7.2.19

cpe:2.3:a:oracle:mysql_cluster:7.2.19
Oracle » Mysql Cluster » Version: 7.2.2

cpe:2.3:a:oracle:mysql_cluster:7.2.2
Oracle » Mysql Cluster » Version: 7.2.20

cpe:2.3:a:oracle:mysql_cluster:7.2.20
Oracle » Mysql Cluster » Version: 7.2.21

cpe:2.3:a:oracle:mysql_cluster:7.2.21
Oracle » Mysql Cluster » Version: 7.2.22

cpe:2.3:a:oracle:mysql_cluster:7.2.22
Oracle » Mysql Cluster » Version: 7.2.23

cpe:2.3:a:oracle:mysql_cluster:7.2.23
Oracle » Mysql Cluster » Version: 7.2.24

cpe:2.3:a:oracle:mysql_cluster:7.2.24
Oracle » Mysql Cluster » Version: 7.2.25

cpe:2.3:a:oracle:mysql_cluster:7.2.25
Oracle » Mysql Cluster » Version: 7.2.26

cpe:2.3:a:oracle:mysql_cluster:7.2.26
Oracle » Mysql Cluster » Version: 7.2.27

cpe:2.3:a:oracle:mysql_cluster:7.2.27
Oracle » Mysql Cluster » Version: 7.2.4

cpe:2.3:a:oracle:mysql_cluster:7.2.4
Oracle » Mysql Cluster » Version: 7.2.5

cpe:2.3:a:oracle:mysql_cluster:7.2.5
Oracle » Mysql Cluster » Version: 7.2.6

cpe:2.3:a:oracle:mysql_cluster:7.2.6
Oracle » Mysql Cluster » Version: 7.2.7

cpe:2.3:a:oracle:mysql_cluster:7.2.7
Oracle » Mysql Cluster » Version: 7.2.8

cpe:2.3:a:oracle:mysql_cluster:7.2.8
Oracle » Mysql Cluster » Version: 7.2.9

cpe:2.3:a:oracle:mysql_cluster:7.2.9
Oracle » Mysql Cluster » Version: 7.3.1

cpe:2.3:a:oracle:mysql_cluster:7.3.1
Oracle » Mysql Cluster » Version: 7.3.10

cpe:2.3:a:oracle:mysql_cluster:7.3.10
Oracle » Mysql Cluster » Version: 7.3.11

cpe:2.3:a:oracle:mysql_cluster:7.3.11
Oracle » Mysql Cluster » Version: 7.3.12

cpe:2.3:a:oracle:mysql_cluster:7.3.12
Oracle » Mysql Cluster » Version: 7.3.13

cpe:2.3:a:oracle:mysql_cluster:7.3.13
Oracle » Mysql Cluster » Version: 7.3.14

cpe:2.3:a:oracle:mysql_cluster:7.3.14
Oracle » Mysql Cluster » Version: 7.3.15

cpe:2.3:a:oracle:mysql_cluster:7.3.15
Oracle » Mysql Cluster » Version: 7.3.16

cpe:2.3:a:oracle:mysql_cluster:7.3.16
Oracle » Mysql Cluster » Version: 7.3.2

cpe:2.3:a:oracle:mysql_cluster:7.3.2
Oracle » Mysql Cluster » Version: 7.3.3

cpe:2.3:a:oracle:mysql_cluster:7.3.3
Oracle » Mysql Cluster » Version: 7.3.30

cpe:2.3:a:oracle:mysql_cluster:7.3.30
Oracle » Mysql Cluster » Version: 7.3.4

cpe:2.3:a:oracle:mysql_cluster:7.3.4
Oracle » Mysql Cluster » Version: 7.3.5

cpe:2.3:a:oracle:mysql_cluster:7.3.5
Oracle » Mysql Cluster » Version: 7.3.6

cpe:2.3:a:oracle:mysql_cluster:7.3.6
Oracle » Mysql Cluster » Version: 7.3.7

cpe:2.3:a:oracle:mysql_cluster:7.3.7
Oracle » Mysql Cluster » Version: 7.3.8

cpe:2.3:a:oracle:mysql_cluster:7.3.8
Oracle » Mysql Cluster » Version: 7.3.9

cpe:2.3:a:oracle:mysql_cluster:7.3.9
Oracle » Mysql Cluster » Version: 7.4.0

cpe:2.3:a:oracle:mysql_cluster:7.4.0
Oracle » Mysql Cluster » Version: 7.4.1

cpe:2.3:a:oracle:mysql_cluster:7.4.1
Oracle » Mysql Cluster » Version: 7.4.10

cpe:2.3:a:oracle:mysql_cluster:7.4.10
Oracle » Mysql Cluster » Version: 7.4.11

cpe:2.3:a:oracle:mysql_cluster:7.4.11
Oracle » Mysql Cluster » Version: 7.4.12

cpe:2.3:a:oracle:mysql_cluster:7.4.12
Oracle » Mysql Cluster » Version: 7.4.13

cpe:2.3:a:oracle:mysql_cluster:7.4.13
Oracle » Mysql Cluster » Version: 7.4.14

cpe:2.3:a:oracle:mysql_cluster:7.4.14
Oracle » Mysql Cluster » Version: 7.4.2

cpe:2.3:a:oracle:mysql_cluster:7.4.2
Oracle » Mysql Cluster » Version: 7.4.29

cpe:2.3:a:oracle:mysql_cluster:7.4.29
Oracle » Mysql Cluster » Version: 7.4.3

cpe:2.3:a:oracle:mysql_cluster:7.4.3
Oracle » Mysql Cluster » Version: 7.4.33

cpe:2.3:a:oracle:mysql_cluster:7.4.33
Oracle » Mysql Cluster » Version: 7.4.34

cpe:2.3:a:oracle:mysql_cluster:7.4.34
Oracle » Mysql Cluster » Version: 7.4.4

cpe:2.3:a:oracle:mysql_cluster:7.4.4
Oracle » Mysql Cluster » Version: 7.4.5

cpe:2.3:a:oracle:mysql_cluster:7.4.5
Oracle » Mysql Cluster » Version: 7.4.6

cpe:2.3:a:oracle:mysql_cluster:7.4.6
Oracle » Mysql Cluster » Version: 7.4.7

cpe:2.3:a:oracle:mysql_cluster:7.4.7
Oracle » Mysql Cluster » Version: 7.4.8

cpe:2.3:a:oracle:mysql_cluster:7.4.8
Oracle » Mysql Cluster » Version: 7.4.9

cpe:2.3:a:oracle:mysql_cluster:7.4.9
Oracle » Mysql Cluster » Version: 7.5.0

cpe:2.3:a:oracle:mysql_cluster:7.5.0
Oracle » Mysql Cluster » Version: 7.5.1

cpe:2.3:a:oracle:mysql_cluster:7.5.1
Oracle » Mysql Cluster » Version: 7.5.19

cpe:2.3:a:oracle:mysql_cluster:7.5.19
Oracle » Mysql Cluster » Version: 7.5.2

cpe:2.3:a:oracle:mysql_cluster:7.5.2
Oracle » Mysql Cluster » Version: 7.5.23

cpe:2.3:a:oracle:mysql_cluster:7.5.23
Oracle » Mysql Cluster » Version: 7.5.24

cpe:2.3:a:oracle:mysql_cluster:7.5.24
Oracle » Mysql Cluster » Version: 7.5.3

cpe:2.3:a:oracle:mysql_cluster:7.5.3
Oracle » Mysql Cluster » Version: 7.5.4

cpe:2.3:a:oracle:mysql_cluster:7.5.4
Oracle » Mysql Cluster » Version: 7.5.5

cpe:2.3:a:oracle:mysql_cluster:7.5.5
Oracle » Mysql Cluster » Version: 7.6.0

cpe:2.3:a:oracle:mysql_cluster:7.6.0
Oracle » Mysql Cluster » Version: 7.6.15

cpe:2.3:a:oracle:mysql_cluster:7.6.15
Oracle » Mysql Cluster » Version: 7.6.19

cpe:2.3:a:oracle:mysql_cluster:7.6.19
Oracle » Mysql Cluster » Version: 7.6.20

cpe:2.3:a:oracle:mysql_cluster:7.6.20
Oracle » Mysql Cluster » Version: 8.0.0

cpe:2.3:a:oracle:mysql_cluster:8.0.0
Oracle » Mysql Cluster » Version: 8.0.21

cpe:2.3:a:oracle:mysql_cluster:8.0.21
Oracle » Mysql Cluster » Version: 8.0.23

cpe:2.3:a:oracle:mysql_cluster:8.0.23
Oracle » Mysql Cluster » Version: 8.0.25

cpe:2.3:a:oracle:mysql_cluster:8.0.25
Oracle » Mysql Cluster » Version: 8.0.26

cpe:2.3:a:oracle:mysql_cluster:8.0.26
Oracle » Mysql Cluster » Version: 8.0.27

cpe:2.3:a:oracle:mysql_cluster:8.0.27
Oracle » Weblogic Server » Version: 14.1.1.0.0

cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1324

Products

Pricing

Contact Us