CVE-2012-2098

medium Apache
CVSS v3 Base Score
5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS Score
4.3%
Exploitation probability in 30 days
Top 11% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
P
Published: June 29, 2012 (5067 days ago)
Last Modified: April 29, 2026
Vendor: Apache
Source: NVD

Description

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.

CWE

CWE-310

Affected Products

apache commons compress

References

🔗 ant.apache.org 🔗 archives.neohapsis.com 🔗 commons.apache.org 🔗 lists.fedoraproject.org 🔗 lists.fedoraproject.org