CVE-2012-2098
NoneCVSS
—
EPSS
12.8%
Published
Jun 29, 2012
CISA due date
—
The record
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.commons:commons-compress | 0 | 1.4.1 |
| Debian:10 | libcommons-compress-java | 0 | 1.4.1-1 |
| Debian:11 | libcommons-compress-java | 0 | 1.4.1-1 |
| Debian:12 | libcommons-compress-java | 0 | 1.4.1-1 |
| Debian:13 | libcommons-compress-java | 0 | 1.4.1-1 |
| Mageia:3 | plexus-archiver | 0 | 2.3-1.1.mga3 |
Related vulnerabilities
- CVE-2024-26308 Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons… Also affects org.apache.commons:commons-compress
- CVE-2024-25710 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons… Also affects org.apache.commons:commons-compress
- CVE-2023-42503 Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache… Also affects org.apache.commons:commons-compress
- CVE-2026-114576 A vulnerability has been found in Linksys RE6250 1.0.04.001. CWE-310
- CVE-2026-86280 A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management &… CWE-310
- CVE-2026-82699 A flaw has been found in sambitraj Student Management System up to… CWE-310
- CVE-2026-82555 A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. CWE-310
- CVE-2026-81836 A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. CWE-310