Allocation of Resources Without Limits or Throttling Vulnerability

CVE-2024-26308

5.5MEDIUM

Key Information

Vendor: Apache
Status: Apache Commons Compress
Vendor: CVE Published:; 19 February 2024

Badges

👾 Exploit Exists

Summary

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.

Affected Version(s)

Apache Commons Compress < 1.26.0

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

👾
Exploit exists.
Aug 12, 2024
Vulnerability published.
Feb 19, 2024
Vulnerability Reserved.
Feb 17, 2024

Collectors

NVD DatabaseMitre Database0 Proof of Concept(s)

Credit

Yakov Shafranovich, Amazon Web Services