CVE-2024-29133

🗓️ 21 Mar 2024 09:05:47Reported by apacheType

CVE-2024-29133: Out-of-bounds Write vulnerability in Apache Commons Configuration

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: IBM License Key Server Administration Agent is vulnerable to a remote code attack in Apache Commons (CVE-2024-29131, CVE-2024-29133)	30 Jul 202416:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.	6 Feb 202505:30	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to out of bounds writes due to hbase-client	10 Mar 202515:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	25 Jan 202611:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Analytics Content Hub is affected by security vulnerabilities	27 Nov 202414:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to a code execution vulnerability in Apache Commons Configuration ( CVE-2024-29131)	21 Jun 202414:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities reported in YAJSW service shipped in IBM WebSphere eXtreme Scale Liberty Deployment	2 May 202402:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	17 Apr 202406:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues due to Apache Commons Configuration and Fasterxml jackson-databind	19 Jun 202410:32	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Commons Configuration Vulnerability Affects IBM Jazz Reporting Service	22 Oct 202410:19	–	ibm

NVD

Vulners

Node

apache commons_configurationRange2.0–2.10.1

Node

fedoraproject fedoraMatch39

fedoraproject fedoraMatch40

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.commons:commons-configuration2",
    "product": "Apache Commons Configuration",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.10.1",
        "status": "affected",
        "version": "2.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/03/20/3
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SNKDKEEKZNL5FGCTZKJ6CFXFVWFL5FJ7/
lists	www.lists.apache.org/thread/ccb9w15bscznh6tnp3wsvrrj9crbszh2
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/YD4AFTIIQW662LUAQRMWS6BBKYSZG3YS/

01 May 2025 19:12Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.4

EPSS0.00997

SSVC

CWE-787