CVE-2012-2098

CVE-2012-2098 is an algorithmic complexity vulnerability affecting Apache Commons Compress versions prior to 1.4.1. Specifically, the bzip2 compressing stream (BZip2CompressorOutputStream) is susceptible to a denial of service (CPU consumption) attack. An unauthenticated remote attacker can exploit this by providing a specially crafted file with many repeating inputs, leading to excessive CPU usage during sorting. While the CVSS score is 5.0 (medium severity) with a low attack complexity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.