Apache Commons Configuration Vulnerability: Out-of-bounds Write Risk
CVE-2024-29131

7.3HIGH

Key Information:

Vendor

Apache
Status
Apache Commons Configuration
Vendor
CVE Published:
21 March 2024

What is CVE-2024-29131?

An out-of-bounds write vulnerability in Apache Commons Configuration could potentially allow attackers to overwrite memory and execute arbitrary code. This issue impacts versions from 2.0 up to 2.10.0. Users are strongly advised to upgrade to version 2.10.1 or later to mitigate this risk and ensure the security of their applications.

Affected Version(s)

Apache Commons Configuration 2.0 < 2.10.1

References

https://lists.apache.org/thread/03nzzzjn4oknyw5y0871tw7lt...
vendor-advisory
https://lists.fedoraproject.org/archives/list/package-ann...
https://lists.fedoraproject.org/archives/list/package-ann...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bob Marinier
.