The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libcommons-compress-java | Jul 30, 2024 | Jun 29, 2012 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | Oct 13, 2015 |
| Oracle Solaris | — | Upgrade developer/build/ant to version 1.8.4-0.175.1.3.0.1.0 on Solaris 11.1 | May 29, 2017 | Jun 29, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 23, 2012 |
| Suse | — | Upgrade ant-scriptsUpgrade ant-apache-oroUpgrade ant-apache-regexpUpgrade ant-jdependUpgrade ant-javadocUpgrade antUpgrade ant-commons-loggingUpgrade ant-javamailUpgrade ant-manualUpgrade ant-traxUpgrade ant-swingUpgrade ant-junitUpgrade ant-apache-resolverUpgrade ant-jmfUpgrade ant-apache-bsfUpgrade ant-apache-bcelUpgrade ant-apache-log4jUpgrade ant-antlrUpgrade ant-nodeps | Dec 12, 2013 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub