CVE-2024-29133
Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.
- Score
- CVSS 3.1 5.4 Medium
- Status
- Analyzed - security@apache.org
- Published
- 2024-03-21
- Last modified
- 2025-02-13
- Weaknesses
- CWE-787
Affected products
- Commons Configuration (Apache)
- Apache Commons Configuration (Apache Software Foundation)
- Fedora (Fedoraproject)
References
- http://www.openwall.com/lists/oss-security/2024/03/20/3
- https://lists.apache.org/thread/ccb9w15bscznh6tnp3wsvrrj9crbszh2
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNKDKEEKZNL5FGCTZKJ6CFXF…
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YD4AFTIIQW662LUAQRMWS6BB…
