Approved changes feed: RSS · Atom

cpe:2.3:a:apache:commons_imaging:0.97:*:*:*:*:*:*:*

part: a version: 0.97 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCommons Imaging (a34f5836-3c32-57bd-926f-f853dc7f5c9c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/commons purl2cpe 2026-06-01 10:14:23.784357
pkg:github/apache/commons-imaging purl2cpe 2026-06-01 10:14:23.784360
pkg:maven/org.apache.commons/commons-imaging purl2cpe 2026-06-01 10:14:23.784363

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17202 vulnerable 2026-06-08 05:11:06.157646 Details available
Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
Published: 2019-05-06T17:14:00.000Z
Updated: 2024-08-05T10:47:03.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17201 vulnerable 2026-06-08 05:11:06.157245 Details available
Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
Published: 2019-05-06T17:07:11.000Z
Updated: 2024-08-05T10:47:03.903Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.