CVE-2024-26308
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/02/2024
Last modified:
27/03/2025
Description
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.<br />
<br />
Users are recommended to upgrade to version 1.26, which fixes the issue.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:apache:commons_compress:*:*:*:*:*:*:*:* | 1.21 (including) | 1.26.0 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.openwall.com/lists/oss-security/2024/02/19/2
- https://lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg
- https://security.netapp.com/advisory/ntap-20240307-0009/
- http://www.openwall.com/lists/oss-security/2024/02/19/2
- https://lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg
- https://security.netapp.com/advisory/ntap-20240307-0009/