[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDt3KJef0vzSxGwaU0yCe2PjoaOWU7KQHJGusAnEBO7g":3,"g5a-risk:CVE-2018-1324":161},{"success":4,"data":5,"meta":159},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":28,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":58,"references":59,"referencesCount":88,"weaknesses":89,"weaknessesCount":98,"isActivelyExploited":99,"cisaInfo":28,"otxData":28,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":157,"notableEvents":158},"CVE-2018-1324","What is CVE-2018-1324?","A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.","A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiv...","2018-03-16T13:29:00.36","2023-11-07T02:55:58.11",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":31,"CVSSMetricV40":28},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":27,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":28,"ObtainAllPrivilege":28,"ObtainUserPrivilege":28,"ObtainOtherPrivilege":28,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":36,"AccessComplexity":27,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":28,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","NETWORK","PARTIAL",4.3,8.6,2.9,0.03656,[41,41,41,41,41,41,41],"Medium",[45,50,54],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"apache","commons_compress","*","cpe:2.3:a:apache:commons_compress:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":48,"criteria":53,"vulnerable":4},"oracle","mysql_cluster","cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",{"vendor":51,"product":55,"version":56,"criteria":57,"vulnerable":4},"weblogic_server","14.1.1.0.0","cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",3,[60,66,70,74,77,80,83],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F103490","Securityfocus",[64,65],"Third Party Advisory","VDB Entry",{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1040549","Securitytracker",[64,65],{"url":71,"source":72,"tags":73},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F1c7b6df6d1c5c8583518a0afa017782924918e4d6acfaf23ed5b2089%40%3Cdev.commons.apache.org%3E","Apache",[],{"url":75,"source":72,"tags":76},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb8ef29df0f1d55aa741170748352ae8e425c7b1d286b2f257711a2dd%40%3Cdev.creadur.apache.org%3E",[],{"url":78,"source":72,"tags":79},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E",[],{"url":81,"source":72,"tags":82},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr5532dc8d5456b5151e8c286801e2e5769f5c04118b29c3b5d13ea387%40%3Cissues.beam.apache.org%3E",[],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2022.html","Oracle",[87,64],"Patch",7,[90],{"id":91,"name":92,"description":93,"extendedDescription":94,"status":95,"abstraction":96,"structure":97},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory.","Incomplete","Base","Simple",1,false,[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2018-1324? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1324, a medium severity cyber security vulnerability from 2018. A specially crafted ZIP archive can be used to cause an in...","CVE-2018-1324, CVE-2018-1324 vulnerability, CVE-2018-1324 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, apache security, oracle security, commons_compress vulnerability, mysql_cluster vulnerability, weblogic_server vulnerability","\u002Fwhat-is\u002Fcve-2018-1324",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1324","Cybersecurity","CVE-2018-1324, CVE-2018-1324 vulnerability, CVE-2018-1324 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127,136],{"Operator":28,"Negate":28,"Nodes":128},[129],{"Operator":130,"Negate":28,"CPEMatch":131},"OR",[132],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":133,"VersionStartExcluding":28,"VersionStartIncluding":134,"VersionEndExcluding":28,"VersionEndIncluding":135},"6526B5F4-4C8C-40F6-B8CC-9FA1F984C936","1.11","1.15",{"Operator":28,"Negate":28,"Nodes":137},[138],{"Operator":130,"Negate":28,"CPEMatch":139},[140,143,147,151,155],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":141,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":142},"6E341886-D9CC-4AFF-B557-BFF55F3CC6CE","7.4.34",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":144,"VersionStartExcluding":28,"VersionStartIncluding":145,"VersionEndExcluding":28,"VersionEndIncluding":146},"4E67FB45-40FD-4929-9976-8DB1D8B5BC83","7.5.0","7.5.24",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":148,"VersionStartExcluding":28,"VersionStartIncluding":149,"VersionEndExcluding":28,"VersionEndIncluding":150},"0C5F3877-5E31-4560-B377-E0067FF7D3C2","7.6.0","7.6.20",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":152,"VersionStartExcluding":28,"VersionStartIncluding":153,"VersionEndExcluding":28,"VersionEndIncluding":154},"0C7788E6-C275-46EF-B34F-0D794995D7F3","8.0.0","8.0.27",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":156,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"04BCDC24-4A21-473C-8733-0D9CFB38A752",[],[],{"lastModified":11,"cacheTime":160,"version":34},1792278747428,{"score":162,"band":163,"action":164,"scoredAt":165},39,"Low","Monitor","2026-10-16T06:43:34.668885+00:00"]