Out-of-Bounds Write

🗓️ 22 Mar 2024 05:11:58Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 37 Views

Apache Commons Configuration Out-of-Bounds Write vulnerability due to improper object tree handling leading to stack overflow and DoS

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: IBM License Key Server Administration Agent is vulnerable to a remote code attack in Apache Commons (CVE-2024-29131, CVE-2024-29133)	30 Jul 202416:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.	6 Feb 202505:30	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to out of bounds writes due to hbase-client	10 Mar 202515:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	25 Jan 202611:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Analytics Content Hub is affected by security vulnerabilities	27 Nov 202414:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to a code execution vulnerability in Apache Commons Configuration ( CVE-2024-29131)	21 Jun 202414:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities reported in YAJSW service shipped in IBM WebSphere eXtreme Scale Liberty Deployment	2 May 202402:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	17 Apr 202406:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues due to Apache Commons Configuration and Fasterxml jackson-databind	19 Jun 202410:32	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Commons Configuration Vulnerability Affects IBM Jazz Reporting Service	22 Oct 202410:19	–	ibm

Vulners

Node

apache commons-configuration2Range2.0–2.10.0java

Source	Link
lists	www.lists.apache.org/thread/ccb9w15bscznh6tnp3wsvrrj9crbszh2
github	www.github.com/apache/commons-configuration/commit/43f4dab021e9acb8db390db2ae80aa0cee4f9ee4
github	www.github.com/advisories/GHSA-9w38-p64v-xpmv
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SNKDKEEKZNL5FGCTZKJ6CFXFVWFL5FJ7/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/YD4AFTIIQW662LUAQRMWS6BBKYSZG3YS/
openwall	www.openwall.com/lists/oss-security/2024/03/20/3

13 Feb 2025 19:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.4

EPSS0.00997

SSVC