CVE-2024-29131

2024-03-2109:15:07

Debian Security Bug Tracker

security-tracker.debian.org

apache commons configuration

out-of-bounds write

cve-2024-29131

upgrade

unix

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

OSVersionArchitecturePackageVersionFilename
Debian12allcommons-configuration2<= 2.8.0-2commons-configuration2_2.8.0-2_all.deb
Debian11allcommons-configuration2<= 2.8.0-1~deb11u1commons-configuration2_2.8.0-1~deb11u1_all.deb
Debian10allcommons-configuration2<= 2.2-1+deb10u1commons-configuration2_2.2-1+deb10u1_all.deb
Debian999allcommons-configuration2< 2.10.1-1commons-configuration2_2.10.1-1_all.deb
Debian13allcommons-configuration2< 2.10.1-1commons-configuration2_2.10.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	commons-configuration2	<= 2.8.0-2	commons-configuration2_2.8.0-2_all.deb
Debian	11	all	commons-configuration2	<= 2.8.0-1~deb11u1	commons-configuration2_2.8.0-1~deb11u1_all.deb
Debian	10	all	commons-configuration2	<= 2.2-1+deb10u1	commons-configuration2_2.2-1+deb10u1_all.deb
Debian	999	all	commons-configuration2	< 2.10.1-1	commons-configuration2_2.10.1-1_all.deb
Debian	13	all	commons-configuration2	< 2.10.1-1	commons-configuration2_2.10.1-1_all.deb