Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-29133

Published: 21/03/2024 Updated: 30/03/2024

Vulnerability Summary

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 prior to 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

Vulnerability Trend

Vendor Advisories

Debian CVElist Bug Report Logs: commons-configuration2: CVE-2024-29133
Debian Bug report logs - #1067514 commons-configuration2: CVE-2024-29133 Package: src:commons-configuration2; Maintainer for src:commons-configuration2 is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 22 Mar 2024 20:30:02 UTC S ...

Mailing Lists

Full Disclosure: CVE-2024-29133: Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree
<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> CVE-2024-29133: Apache Commons Configuration: StackOverflowError calling ListDelimiterHandlerflatten(Object, int) with a cycli ...

References

CWE-787https://lists.apache.org/thread/ccb9w15bscznh6tnp3wsvrrj9crbszh2https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YD4AFTIIQW662LUAQRMWS6BBKYSZG3YS/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNKDKEEKZNL5FGCTZKJ6CFXFVWFL5FJ7/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067514https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook