Lucene search
Ubuntu.comUB:CVE-2024-26308HistoryFeb 19, 2024 - 12:00 a.m.
CVE-2024-26308
2024-02-1900:00:00
ubuntu.com
ubuntu.com
13
cve-2024-26308
apache commons compress
resource allocation
throttling
vulnerability
upgrade
unix
Allocation of Resources Without Limits or Throttling vulnerability in
Apache Commons Compress.This issue affects Apache Commons Compress: from
1.21 before 1.26. Users are recommended to upgrade to version 1.26, which
fixes the issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | libcommons-compress-java | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | libcommons-compress-java | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | libcommons-compress-java | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | libcommons-compress-java | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | libcommons-compress-java | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | libcommons-compress-java | < any | UNKNOWN |
References
www.openwall.com/lists/oss-security/2024/02/19/2
launchpad.net/bugs/cve/CVE-2024-26308
lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg
nvd.nist.gov/vuln/detail/CVE-2024-26308
security-tracker.debian.org/tracker/CVE-2024-26308
www.cve.org/CVERecord?id=CVE-2024-26308
www.openwall.com/lists/oss-security/2024/02/19/2
Related
cgr
cgr
CVE-2024-26308 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Denial Of Service (DoS)
2024-02-20 06:39:51
cve
cve
CVE-2024-26308
2024-02-19 09:15:38
osv
osv
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
2024-02-19 09:30:52
CVE-2024-26308
2024-02-19 09:15:38
debiancve
debiancve
CVE-2024-26308
2024-02-19 09:15:38
github
github
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
2024-02-19 09:30:52
cvelist
cvelist
redhatcve
redhatcve
CVE-2024-26308
2024-02-19 20:50:29
openvas
openvas
Apache Commons Compress 1.21 < 1.26.0 DoS Vulnerability
2024-02-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0726-1)
2024-03-01 00:00:00
wolfi
wolfi
CVE-2024-26308 vulnerabilities
2024-06-01 15:24:07
prion
prion
Code injection
2024-02-19 09:15:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Apache Commons Compress [CVE-2024-26308]
2024-05-02 23:59:07
redhat
redhat
nessus
nessus
Oracle Primavera Gateway (April 2024 CPU)
2024-04-18 00:00:00
Oracle Primavera Unifier (April 2024 CPU)
2024-04-17 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00