Lucene search
WolfiWOLFI:CVE-2024-26308HistoryJun 19, 2024 - 3:18 p.m.
CVE-2024-26308 vulnerabilities
2024-06-1915:18:08
packages.wolfi.dev
24
cve-2024-26308
vulnerabilities
packages
unix
jenkins
wavefront-proxy
neo4j
opensearch-2
gradle-8
trino
dependency-track
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.9%
Vulnerabilities for packages: wavefront-proxy, spdx-tools-java, gradle, opensearch, dependency-track, trino, jenkins, neo4j
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Wolfi | unknown | x86_64 | dependency-track | <= 4.10.1-r2 | dependency-track-4.10.1-r2.apk |
| Wolfi | unknown | aarch64 | dependency-track | <= 4.10.1-r2 | dependency-track-4.10.1-r2.apk |
| Wolfi | unknown | x86_64 | gradle | <= 8.7.0-r1 | gradle-8.7.0-r1.apk |
| Wolfi | unknown | aarch64 | gradle | <= 8.7.0-r1 | gradle-8.7.0-r1.apk |
| Wolfi | unknown | x86_64 | jenkins | <= 2.447-r0 | jenkins-2.447-r0.apk |
| Wolfi | unknown | aarch64 | jenkins | <= 2.447-r0 | jenkins-2.447-r0.apk |
| Wolfi | unknown | x86_64 | neo4j | <= 5.18.0-r0 | neo4j-5.18.0-r0.apk |
| Wolfi | unknown | aarch64 | neo4j | <= 5.18.0-r0 | neo4j-5.18.0-r0.apk |
| Wolfi | unknown | x86_64 | opensearch | <= 2.12.0-r1 | opensearch-2.12.0-r1.apk |
| Wolfi | unknown | aarch64 | opensearch | <= 2.12.0-r1 | opensearch-2.12.0-r1.apk |
Related
veracode
veracode
Denial Of Service (DoS)
2024-02-20 06:39:51
cgr
cgr
CVE-2024-26308 vulnerabilities
2024-05-19 03:07:16
prion
prion
Code injection
2024-02-19 09:15:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Apache Commons Compress [CVE-2024-26308]
2024-05-02 23:59:07
cve
cve
CVE-2024-26308
2024-02-19 09:15:38
osv
osv
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
2024-02-19 09:30:52
CVE-2024-26308
2024-02-19 09:15:38
nvd
nvd
CVE-2024-26308
2024-02-19 09:15:38
debiancve
debiancve
CVE-2024-26308
2024-02-19 09:15:38
github
github
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
2024-02-19 09:30:52
redhatcve
redhatcve
CVE-2024-26308
2024-02-19 20:50:29
ubuntucve
ubuntucve
CVE-2024-26308
2024-02-19 00:00:00
openvas
openvas
Apache Commons Compress 1.21 < 1.26.0 DoS Vulnerability
2024-02-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0726-1)
2024-03-01 00:00:00
cvelist
cvelist
redhat
redhat
nessus
nessus
Oracle Primavera Gateway (April 2024 CPU)
2024-04-18 00:00:00
Oracle Primavera Unifier (April 2024 CPU)
2024-04-17 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.9%
Related for WOLFI:CVE-2024-26308