CVE-2024-25710 : APACHE COMMONS COMPRESS UP TO 1.25.0 INFINITE LOOP

Description Loop with Unreachable Exit Condition (‘Infinite Loop’) vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. References https://lists.apache.org/thread/cz8qkcwphy4cx8gltn932ln51cbtq6kf http://www.openwall.com/lists/oss-security/2024/02/19/1 For More Information CVERecord
What Are Negotiation Floods?

Negotiation Floods are a type of DDoS attack that exploits network protocols’ negotiation processes to overwhelm network resources. The attacker floods the network with an excessive number of protocol negotiation requests, exhausting the available resources and rendering the network unresponsive to legitimate traffic. What Is TCP RST Floods SSL? How Do Negotiation Floods Work? Attackers […]