CVE-2024-29131

2024-03-2109:15:07

Debian Security Bug Tracker

security-tracker.debian.org

apache commons configuration

out-of-bounds write

cve-2024-29131

upgrade

unix

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

6.7

Confidence

High

EPSS

Percentile

15.5%

JSON

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

OSVersionArchitecturePackageVersionFilename
Debian12allcommons-configuration2<= 2.8.0-2commons-configuration2_2.8.0-2_all.deb
Debian11allcommons-configuration2<= 2.8.0-1~deb11u1commons-configuration2_2.8.0-1~deb11u1_all.deb
Debian999allcommons-configuration2< 2.10.1-1commons-configuration2_2.10.1-1_all.deb
Debian13allcommons-configuration2< 2.10.1-1commons-configuration2_2.10.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	commons-configuration2	<= 2.8.0-2	commons-configuration2_2.8.0-2_all.deb
Debian	11	all	commons-configuration2	<= 2.8.0-1~deb11u1	commons-configuration2_2.8.0-1~deb11u1_all.deb
Debian	999	all	commons-configuration2	< 2.10.1-1	commons-configuration2_2.10.1-1_all.deb
Debian	13	all	commons-configuration2	< 2.10.1-1	commons-configuration2_2.10.1-1_all.deb