CVE Vulnerabilities

CVE-2024-25710

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Feb 19, 2024 | Modified: Mar 07, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.

Users are recommended to upgrade to version 1.26.0 which fixes the issue.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Commons_compress Apache 1.3 (including) 1.26.0 (excluding)

References