CVE-2021-35515 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial…
Published: 2021-07-13 · CVSS: Unscored
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7