Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45970
HistoryMar 22, 2024 - 5:11 a.m.

Out-of-Bounds Write

2024-03-2205:11:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
apache commons configuration
out-of-bounds write
improper handling
stackoverflowerror
listdelimiterhandler.flatten()
denial of service

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

Apache Commons Configuration is vulnerable to Out-of-Bounds Write. The vulnerability is due to improper handling of a cyclical object tree, which can trigger a StackOverflowError when the ListDelimiterHandler.flatten() method is called. This occurs because the method recursively traverses the object tree without a proper termination condition, leading to excessive recursion and eventually a stack overflow, resulting in Denial of Service (DoS).

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%