CVE-2012-2098 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-2098 Interim 1 25 2025-11-05T05:39:06Z current 2021-05-30T13:03:22Z 2025-11-05T05:39:06Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-2098 Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2012-December/000849.html E-Mail link for SUSE-RU-2012:1631-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Point of Service 11 SP3 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server for SAP Applications 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Manager Server Module 4.3 ant ant-1.7.0-200.26.1 ant-1.7.1-20.11.1 ant-1.7.1-20.9.53 ant-antlr-1.7.0-200.26.2 ant-antlr-1.7.1-16.11.1 ant-apache-bcel-1.7.0-200.26.2 ant-apache-bcel-1.7.1-16.11.1 ant-apache-bsf-1.7.0-200.26.2 ant-apache-bsf-1.7.1-16.11.1 ant-apache-log4j-1.7.0-200.26.2 ant-apache-log4j-1.7.1-16.11.1 ant-apache-oro-1.7.0-200.26.2 ant-apache-oro-1.7.1-16.11.1 ant-apache-regexp-1.7.0-200.26.2 ant-apache-regexp-1.7.1-16.11.1 ant-apache-resolver-1.7.0-200.26.2 ant-apache-resolver-1.7.1-16.11.1 ant-commons-logging-1.7.0-200.26.2 ant-commons-logging-1.7.1-16.11.1 ant-javadoc-1.7.0-200.26.1 ant-javadoc-1.7.1-20.11.1 ant-javamail-1.7.0-200.26.2 ant-javamail-1.7.1-16.11.1 ant-jdepend-1.7.0-200.26.2 ant-jdepend-1.7.1-16.11.1 ant-jmf-1.7.0-200.26.2 ant-jmf-1.7.1-16.11.1 ant-junit-1.7.0-200.26.2 ant-junit-1.7.1-16.11.1 ant-manual-1.7.0-200.26.1 ant-manual-1.7.1-20.11.1 ant-nodeps-1.7.0-200.26.2 ant-nodeps-1.7.1-16.11.1 ant-scripts-1.7.0-200.26.1 ant-scripts-1.7.1-20.11.1 ant-swing-1.7.0-200.26.2 ant-swing-1.7.1-16.11.1 ant-trax-1.7.0-200.26.2 ant-trax-1.7.1-16.11.1 ant-trax-1.7.1-16.9.65 apache-commons-compress ant-1.7.0-200.26.1 as a component of SUSE Linux Enterprise Server 11 SP2 ant-trax-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Server 11 SP2 ant-1.7.1-20.9.53 as a component of SUSE Linux Enterprise Server 11 SP3 ant-trax-1.7.1-16.9.65 as a component of SUSE Linux Enterprise Server 11 SP3 ant-1.7.1-20.11.1 as a component of SUSE Linux Enterprise Server 11 SP4 ant-trax-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Server 11 SP4 ant-1.7.0-200.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 ant-trax-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 ant-1.7.0-200.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-antlr-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-apache-bcel-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-apache-bsf-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-apache-log4j-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-apache-oro-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-apache-regexp-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-apache-resolver-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-commons-logging-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-javadoc-1.7.0-200.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-javamail-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-jdepend-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-jmf-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-junit-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-manual-1.7.0-200.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-nodeps-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-scripts-1.7.0-200.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-swing-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-trax-1.7.0-200.26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ant-1.7.1-20.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-antlr-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-apache-bcel-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-apache-bsf-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-apache-log4j-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-apache-oro-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-apache-regexp-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-apache-resolver-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-commons-logging-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-javadoc-1.7.1-20.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-javamail-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-jdepend-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-jmf-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-junit-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-manual-1.7.1-20.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-nodeps-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-scripts-1.7.1-20.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-swing-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ant-trax-1.7.1-16.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache-commons-compress as a component of SUSE Enterprise Storage 7.1 apache-commons-compress as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS apache-commons-compress as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS apache-commons-compress as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS apache-commons-compress as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS apache-commons-compress as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 ant as a component of SUSE Linux Enterprise Point of Service 11 SP3 ant as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata ant as a component of SUSE Linux Enterprise Server 11 SP4 LTSS apache-commons-compress as a component of SUSE Linux Enterprise Server 15 SP2-LTSS apache-commons-compress as a component of SUSE Linux Enterprise Server 15 SP3-LTSS apache-commons-compress as a component of SUSE Linux Enterprise Server 15 SP4-LTSS apache-commons-compress as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 apache-commons-compress as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 apache-commons-compress as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 apache-commons-compress as a component of SUSE Manager Server Module 4.3 Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs. CVE-2012-2098 SUSE Linux Enterprise Server 11 SP2:ant-1.7.0-200.26.1 SUSE Linux Enterprise Server 11 SP2:ant-trax-1.7.0-200.26.2 SUSE Linux Enterprise Server 11 SP3:ant-1.7.1-20.9.53 SUSE Linux Enterprise Server 11 SP3:ant-trax-1.7.1-16.9.65 SUSE Linux Enterprise Server 11 SP4:ant-1.7.1-20.11.1 SUSE Linux Enterprise Server 11 SP4:ant-trax-1.7.1-16.11.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:ant-1.7.0-200.26.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:ant-trax-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-1.7.0-200.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-antlr-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-apache-bcel-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-apache-bsf-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-apache-log4j-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-apache-oro-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-apache-regexp-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-apache-resolver-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-commons-logging-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-javadoc-1.7.0-200.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-javamail-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-jdepend-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-jmf-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-junit-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-manual-1.7.0-200.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-nodeps-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-scripts-1.7.0-200.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-swing-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP2:ant-trax-1.7.0-200.26.2 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-1.7.1-20.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-antlr-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-apache-bcel-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-apache-bsf-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-apache-log4j-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-apache-oro-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-apache-regexp-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-apache-resolver-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-commons-logging-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-javadoc-1.7.1-20.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-javamail-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-jdepend-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-jmf-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-junit-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-manual-1.7.1-20.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-nodeps-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-scripts-1.7.1-20.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-swing-1.7.1-16.11.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ant-trax-1.7.1-16.11.1 SUSE Enterprise Storage 7.1:apache-commons-compress SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-commons-compress SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-commons-compress SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-commons-compress SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-commons-compress SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-commons-compress SUSE Linux Enterprise Point of Service 11 SP3:ant SUSE Linux Enterprise Server 11 SP3 for Teradata:ant SUSE Linux Enterprise Server 11 SP4 LTSS:ant SUSE Linux Enterprise Server 15 SP2-LTSS:apache-commons-compress SUSE Linux Enterprise Server 15 SP3-LTSS:apache-commons-compress SUSE Linux Enterprise Server 15 SP4-LTSS:apache-commons-compress SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-commons-compress SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-commons-compress SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-commons-compress SUSE Manager Server Module 4.3:apache-commons-compress moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P