CVE-2018-1324: Loop with Unreachable Exit Condition (Infinite Loop)

March 16, 2018 (updated October 3, 2019)

A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress extra field parser used by the ZipFile and ZipArchiveInputStream.

References

www.securityfocus.com/bid/103490
www.securitytracker.com/id/1040549
nvd.nist.gov/vuln/detail/CVE-2018-1324

Code Behaviors & Features

Detect and mitigate CVE-2018-1324 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →