Apache Commons Compress 1.21 < 1.26.0 DoS Vulnerability

The Apache Commons Compress library is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache Commons Compress 1.3 < 1.26.0 DoS Vulnerability

The Apache Commons Compress library is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Imaging Data Commons libdicom DICOM File Meta Information Parsing Use-After-Free vulnerabilities

Talos Vulnerability Report TALOS-2024-1931 Imaging Data Commons libdicom DICOM File Meta Information Parsing Use-After-Free vulnerabilities February 20, 2024 CVE Number CVE-2024-24793,CVE-2024-24794 SUMMARY A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imagi...

CVE-2024-26308

An allocation of resources without limits or throttling vulnerability was found in Apache Commons Compress. This issue can lead to an out-of-memory error. Mitigation No mitigation is currently available for this vulnerability...

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

ai.catboost:catboost-spark_3.3_2.12 (>=1.1, <=1.2.10), ai.catboost:catboost-spark_3.3_2.13 (>=1.1.1, <=1.2.10) +18918 more potentially affected by CVE-2024-26308 via org.apache.commons:commons-compress (>=1.21, <=1.25.0)

org.apache.commons:commons-compress MAVEN version =1.21, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.3.5, =0.3.3, =0.3.3, =0.1.12, =0.1.2, =0.18.0, =0.26.0 and more Source cves: CVE-2024-26308 Source advisory: GHSA-4265-CCF5-PHJ5...

GHSA-4265-CCF5-PHJ5 Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

ai.catboost:catboost-spark_3.3_2.12 (>=1.1, <=1.2.10), ai.catboost:catboost-spark_3.3_2.13 (>=1.1.1, <=1.2.10) +18918 more potentially affected by CVE-2024-26308 via org.apache.commons:commons-compress (>=1.21, <=1.25.0)

org.apache.commons:commons-compress MAVEN version =1.21, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.3.5, =0.3.3, =0.3.3, =0.1.12, =0.1.2, =0.18.0, =0.26.0 and more Source cves: CVE-2024-26308 Source advisory: OSV:GHSA-4265-CCF5-PHJ5...

GHSA-4G9R-VXHX-9PGX Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...

Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...

0x.plugin.bom:zero-x-plugin-bom (>=0.0.10, <=1.1.0), ae.teletronics.nlp:entityextraction (>=1.3, <=1.4) +37561 more potentially affected by CVE-2024-25710 via org.apache.commons:commons-compress (>=1.3, <=1.25.0)

org.apache.commons:commons-compress MAVEN version =1.3, =0.0.10, =1.3, =1.0.1, =0.0.4, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2.10 and more Source cves: CVE-2024-25710 Source advisory: GHSA-4G9R-VXHX-9PGX...

CVE-2024-26308

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

DEBIAN-CVE-2024-26308

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

AZL-34812 CVE-2024-25710 affecting package javapackages-bootstrap for versions less than 1.14.0-2

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...

DEBIAN-CVE-2024-25710

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...

CVE-2024-25710

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...

AZL-44916 CVE-2024-25710 affecting package apache-commons-compress 1.19-3

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...

AZL-43564 CVE-2024-25710 affecting package apache-commons-compress 1.19-3

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...

Code injection

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

UBUNTU-CVE-2024-25710

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...