Most recent entries from all

bdu:2024-02393

certfr-2024-avi-0330 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre el…

certfr-2024-avi-0330

Withdrawn: CLEANSTART-2026-IF26545 — Security fixes in apache-hive 4.0.1-r1

Withdrawn by the publisher.

Affected: CleanStart: apache-hive

Package apache-hive version 4.0.1-r1 fixes 27 vulnerabilities: CVE-2024-47561, CVE-2024-7254, CVE-2024-47554, CVE-2022-41881, CVE-2023-34462...

cnvd-2024-16110

EUVD-2026-217376

fkie_cve-2024-29131

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.

Users are recommended to upgrade to version 2.10.1, which fixes the issue.

GHSA-xjp4-hw94-mvp5 — Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

Affected: Maven: org.apache.commons:commons-configuration2

This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' when adding a property in 'AbstractListDelimiterHandler.flattenIterator()'. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

gsd-2024-29131

openSUSE-SU-2024:13791-1 — apache-commons-configuration2-2.10.1-1.1 on GA media

apache-commons-configuration2-2.10.1-1.1 on GA media

RHSA-2024:2945 — Red Hat Security Advisory: Red Hat AMQ Broker 7.12.0 release and security update

ActiveMQ: Deserialization vulnerability on Jolokia that allows authenticated users to perform RCE logback: serialization vulnerability in logback receiver logback: A serialization vulnerability in logback receiver keycloak: XSS via assertion consumer service URL in SAML POST-binding flow zookeeper: Authorization Bypass in Apache ZooKeeper keycloak: path transversal in redirection validation keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS springframework: URL Parsing with Host Validation netty-codec-http: Allocation of Resources Without Limits or Throttling commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

SUSE-SU-2024:1377-1 — Security update for apache-commons-configuration

Security update for apache-commons-configuration

UBUNTU-CVE-2024-29131

Affected: Ubuntu:18.04:LTS: commons-configuration2, Ubuntu:20.04:LTS: commons-configuration2, Ubuntu:22.04:LTS: commons-configuration2, Ubuntu:24.04:LTS: commons-configuration2

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

WID-SEC-W-2024-0679 — Apache Commons: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Ein Angreifer kann mehrere Schwachstellen in Apache Commons ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.