CVE-2024-29133

A vulnerability was found in Apache Commons-Configuration2, where a Stack Overflow Error occurs when calling ListDelimiterHandler.flattenObject, int with a cyclical object tree. This issue could allow an attacker to trigger an out-of-bounds write that could lead to memory corruption or cause a...

CVE-2024-29133 vulnerabilities

Vulnerabilities for packages: celeborn, hadoop-client-modules, druid, trino, cassandra-reaper, tez...

CVE-2024-29133 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, tez, trino, celeborn...

CVE-2024-29133 Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue...

CVE-2024-29133

CVE-2024-29133 describes an out-of-bounds write vulnerability in Apache Commons Configuration, affecting versions 2.0 up to 2.10.0 (and related entries indicate 2.0 through 2.10.1 as impacted). The issue is fixed in 2.10.1. Multiple connected sources corroborate the vulnerability class and the fi...

IBM DB2 < v10.5 Special Build 41270 / < 11.1 Special Build 41268 / < 11.5 Special Build 29133 DoS (Unix)

According to its self-reported version number, IBM Db2 is vulnerable to a denial of service. Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally. Note that Nessus has not tested for this issue but has instead relied only on the application's...

CVE-2022-29133

creationtimestamp| type| source ---|---|--- 2022-05-11 00:39:17+00:00| seen| https://t.me/cibsecurity/42302...

CVE-2022-29133

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2022-29133 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2022-29133

CVE-2022-29133 is a Windows kernel elevation of privilege vulnerability. Public sources in the connected set indicate a local vulnerability affecting Windows, with Microsoft’s advisory KB5013943 and related MSRC/MS updates addressing the issue. The vulnerability is categorized as a kernel-level e...

openSUSE 15 Security Update : haserl (openSUSE-SU-2021:1279-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1279-1 advisory. - Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any...

openSUSE: Security Advisory for haserl (openSUSE-SU-2021:1279-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1279-1 Security update for haserl

This update for haserl fixes the following issues: Update to version 0.9.36: Fixed: Its possible to issue a PUT request without a CONTENT-TYPE. Assume an octet-stream in that case. This is CVE-2021-29133 and boo1187671 Change the Prefix for variables to be the REQUESTMETHOD PUT/DELETE/GET/POST TH...

Security update for haserl (moderate)

openSUSE Security Update: Security update for haserl Announcement ID: openSUSE-SU-2021:1279-1 Rating: moderate References: 1187671 Cross-References: CVE-2021-29133 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 An...

Haserl Arbitrary File Reader

This module exploits haserl prior to 0.9.36 to read arbitrary files. The most widely accepted exploitation vector is reading /etc/shadow, which will reveal root's hash for cracking. Module Options msf use post/linux/gather/haserlread msf posthaserlread show actions ...actions... msf posthaserlrea...

CVE-2021-29133

creationtimestamp| type| source ---|---|--- 2021-04-09 11:17:02+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/linux/gather/haserlread.rb 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:36+00:00| seen|...

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

CVE-2021-29133

CVE-2021-29133 affects haserl, a component of the Alpine Linux Configuration Framework. Before 0.9.36, it fails to verify context, enabling local users to read arbitrary files on the filesystem. Affected: haserl prior to 0.9.36 (Alpine Linux Configuration Framework). Known remediation: upgrade to...