Apache Commons Imaging vulnerabilities

2 CVEs affecting Apache Commons Imaging, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-17202, published 2019-05-06.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-17202, published 2019-05-06. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan…
• CVE-2018-17201, published 2019-05-06. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to…