[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvvMjmLRR8MPZuhPfe1E2ZfwvjoXxucKW0NRvbx-Avcs":3,"g5a-risk:CVE-2018-11771":173},{"success":4,"data":5,"meta":171},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":28,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":55,"references":56,"referencesCount":115,"weaknesses":116,"weaknessesCount":125,"isActivelyExploited":126,"cisaInfo":28,"otxData":28,"relatedBlogPosts":127,"seoMetadata":128,"configurations":153,"relatedVendorCves":169,"notableEvents":170},"CVE-2018-11771","What is CVE-2018-11771?","When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress' zip package.","When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct E...","2018-08-16T15:29:00.23","2023-11-07T02:51:45.69",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":31,"CVSSMetricV40":28},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":27,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":28,"ObtainAllPrivilege":28,"ObtainUserPrivilege":28,"ObtainOtherPrivilege":28,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":36,"AccessComplexity":27,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":28,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","NETWORK","PARTIAL",4.3,8.6,2.9,0.05253,[41,41,41,41,41,41,41],"Medium",[45,50],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"apache","commons_compress","*","cpe:2.3:a:apache:commons_compress:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"oracle","weblogic_server","14.1.1.0.0","cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",2,[57,62,66,70,73,76,79,82,85,88,91,94,97,100,103,106,109],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105139","Securityfocus",[61],"Broken Link",{"url":63,"source":64,"tags":65},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041503","Securitytracker",[61],{"url":67,"source":68,"tags":69},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F0adb631517766e793e18a59723e2df08ced41eb9a57478f14781c9f7%40%3Cdev.tinkerpop.apache.org%3E","Apache",[],{"url":71,"source":68,"tags":72},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F3565494c263dfeb4dcb2a71cb24d09a1ca285cd6ac74edc025a3af8a%40%3Ccommits.tinkerpop.apache.org%3E",[],{"url":74,"source":68,"tags":75},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F35f60d6d0407c13c39411038ba1aca71d92595ed7041beff4d07f2ee%40%3Ccommits.tinkerpop.apache.org%3E",[],{"url":77,"source":68,"tags":78},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F6c79965066c30d4e330e04d911d3761db41b82c89ae38d9a6b37a6f1%40%3Cdev.tinkerpop.apache.org%3E",[],{"url":80,"source":68,"tags":81},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F714c6ac1b1b50f8557e7342903ef45f1538a7bc60a0b47d6e48c273d%40%3Ccommits.tinkerpop.apache.org%3E",[],{"url":83,"source":68,"tags":84},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb8da751fc0ca949534cdf2744111da6bb0349d2798fac94b0a50f330%40%3Cannounce.apache.org%3E",[],{"url":86,"source":68,"tags":87},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb8ef29df0f1d55aa741170748352ae8e425c7b1d286b2f257711a2dd%40%3Cdev.creadur.apache.org%3E",[],{"url":89,"source":68,"tags":90},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb907e70bc422905d7962fd18f863f746bf7b4e7ed9da25c148580c61%40%3Cnotifications.commons.apache.org%3E",[],{"url":92,"source":68,"tags":93},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fc7954dc1e8fafd7ca1449f078953b419ebf8936e087f235f3bd024be%40%3Ccommits.tinkerpop.apache.org%3E",[],{"url":95,"source":68,"tags":96},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fe3eae9e6fc021c4c22dda59a335d21c12eecab480b48115a2f098ef6%40%3Ccommits.tinkerpop.apache.org%3E",[],{"url":98,"source":68,"tags":99},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Feeecc1669242b28a3777ae13c68b376b0148d589d3d8170340d61120%40%3Cdev.tinkerpop.apache.org%3E",[],{"url":101,"source":68,"tags":102},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff28052d04cb8dbaae39bfd3dc8438e58c2a8be306a3f381f4728d7c1%40%3Ccommits.commons.apache.org%3E",[],{"url":104,"source":68,"tags":105},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff9cdd32af7d73e943452167d15801db39e8130409ebb9efb243b3f41%40%3Ccommits.tinkerpop.apache.org%3E",[],{"url":107,"source":68,"tags":108},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E",[],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2022.html","Oracle",[113,114],"Patch","Third Party Advisory",17,[117],{"id":118,"name":119,"description":120,"extendedDescription":121,"status":122,"abstraction":123,"structure":124},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory.","Incomplete","Base","Simple",1,false,[],{"title":129,"metaDescription":130,"keywords":131,"canonicalUrl":132,"structuredData":133},"What is CVE-2018-11771? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-11771, a medium severity cyber security vulnerability from 2018. When reading a specially crafted ZIP archive, the read me...","CVE-2018-11771, CVE-2018-11771 vulnerability, CVE-2018-11771 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, apache security, oracle security, commons_compress vulnerability, weblogic_server vulnerability","\u002Fwhat-is\u002Fcve-2018-11771",{"@context":134,"@type":135,"headline":129,"description":130,"datePublished":10,"dateModified":11,"author":136,"publisher":140,"about":144,"mainEntityOfPage":148,"articleSection":151,"keywords":152},"https:\u002F\u002Fschema.org","TechArticle",{"@type":137,"name":138,"url":139},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":137,"name":138,"url":139,"logo":141},{"@type":142,"url":143},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":145,"name":6,"description":146,"additionalType":147},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":149,"@id":150},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-11771","Cybersecurity","CVE-2018-11771, CVE-2018-11771 vulnerability, CVE-2018-11771 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[154,163],{"Operator":28,"Negate":28,"Nodes":155},[156],{"Operator":157,"Negate":28,"CPEMatch":158},"OR",[159],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":160,"VersionStartExcluding":28,"VersionStartIncluding":161,"VersionEndExcluding":28,"VersionEndIncluding":162},"A1F750C3-96B0-44AF-AE2C-9108F99F756A","1.7.0","1.17.0",{"Operator":28,"Negate":28,"Nodes":164},[165],{"Operator":157,"Negate":28,"CPEMatch":166},[167],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":168,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"04BCDC24-4A21-473C-8733-0D9CFB38A752",[],[],{"lastModified":11,"cacheTime":172,"version":34},1792278747468,{"score":174,"band":175,"action":176,"scoredAt":177},33,"Low","Monitor","2026-10-16T06:44:43.004036+00:00"]