Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
vulnrichmentApacheVULNRICHMENT:CVE-2024-29133
HistoryMar 21, 2024 - 9:05 a.m.

CVE-2024-29133 Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

2024-03-2109:05:47
CWE-787
apache
github.com
2
apache
stackoverflowerror
out-of-bounds write

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

JSON

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.

Users are recommended to upgrade to version 2.10.1, which fixes the issue.

Related

osv 5
nvd 1
cnvd 1
nessus 6
cve 1
github 1
cgr 1
veracode 1
wolfi 1
cvelist 1
redhatcve 1
debiancve 1
atlassian 1
ibm 14
openvas 6
fedora 2
redhat 3
oracle 1
osv
osv
Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree
2024-03-21 09:31:14
CGA-9pcx-658r-q6cc
2024-06-06 12:25:47
CGA-gxrv-2q36-c76g
2024-06-06 12:26:00
nvd
nvd
CVE-2024-29133
2024-03-21 09:15:07
cnvd
cnvd
Apache Commons Configuration Out-of-Bounds Write Vulnerability (CNVD-2024-16109)
2024-03-26 00:00:00
nessus
nessus
Atlassian Confluence 1.0.1 < 7.19.23 / 7.20.x < 8.5.9 / 8.6.x < 8.9.1 (CONFSERVER-95975)
2024-06-27 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache-commons-configuration (SUSE-SU-2024:1377-1)
2024-04-23 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache-commons-configuration2 (SUSE-SU-2024:1365-1)
2024-04-23 00:00:00
cve
cve
CVE-2024-29133
2024-03-21 09:15:07
github
github
Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree
2024-03-21 09:31:14
cgr
cgr
CVE-2024-29133 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Out-of-Bounds Write
2024-03-22 05:11:58
wolfi
wolfi
CVE-2024-29133 vulnerabilities
2024-09-16 09:11:41
cvelist
cvelist
CVE-2024-29133 Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree
2024-03-21 09:05:47
redhatcve
redhatcve
CVE-2024-29133
2024-03-21 12:16:00
debiancve
debiancve
CVE-2024-29133
2024-03-21 09:15:07
atlassian
atlassian
DoS (Denial of Service) org.apache.commons:commons-configuration2 Dependency in Confluence Data Center and Server
2024-06-12 21:13:20
ibm
ibm
Security Bulletin: Multiple vulnerabilities reported in YAJSW service shipped in IBM WebSphere eXtreme Scale Liberty Deployment
2024-05-02 02:53:11
Security Bulletin: Apache Commons Configuration vulnerability has been identified in Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2024-29131,CVE-2024-29133)
2024-09-04 15:22:47
Security Bulletin: IBM® Db2® federated server is affected by vulnerabilities in the open source commons-configuration2 library. (CVE-2024-29131, CVE-2024-29133)
2024-06-11 17:39:14
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1365-1)
2024-05-07 00:00:00
openSUSE: Security Advisory for apache (SUSE-SU-2024:1377-1)
2024-04-25 00:00:00
Fedora: Security Advisory (FEDORA-2024-c673517dce)
2024-04-03 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: apache-commons-configuration-2.10.1-1.fc39
2024-03-30 01:10:55
[SECURITY] Fedora 40 Update: apache-commons-configuration-2.10.1-1.fc40
2024-03-29 04:11:00
redhat
redhat
(RHSA-2024:3920) Important: Migration Toolkit for Runtimes security, bug fix and enhancement update
2024-06-13 11:01:17
(RHSA-2024:2945) Important: Red Hat AMQ Broker 7.12.0 release and security update
2024-05-21 14:17:10
(RHSA-2024:3989) Important: Migration Toolkit for Applications security and bug fix update
2024-06-20 00:33:41
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

JSON
Related for VULNRICHMENT:CVE-2024-29133
osv5nvd1cnvd1nessus6cve1github1cgr1veracode1wolfi1cvelist1redhatcve1debiancve1atlassian1ibm14openvas6fedora2redhat3oracle1