Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Infinite loop in junrar
Vulnerability Description
Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem is patched in 7.4.1. There are no known workarounds and users are advised to upgrade as soon as possible.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
N/A
Vulnerability Title
Junrar 安全漏洞
Vulnerability Description
Junrar是一个普通 Java Unrar 库。用于读取和提取 .Rar 文件。 Junrar 存在安全漏洞，该漏洞源于通过构建RAR存档会触发无限循环。
CVSS Information
N/A
Vulnerability Type
N/A