CVE-2018-8015

Name of the Vulnerable Software and Affected Versions: Apache ORC versions 1.0.0 through 1.4.3

Description: A malformed ORC file can cause an endlessly recursive function call in the C++ or Java parser, potentially leading to a denial-of-service against software that uses the ORC file parser. The C++ parser may also experience a stack overflow, which could corrupt the stack.

Recommendations: For Apache ORC versions 1.0.0 through 1.4.3, consider updating to a version that fixes this issue to prevent denial-of-service attacks and potential stack corruption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.