Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-26308 · ADVISORY
• apache/commons-compress · PACKAGE
• lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg · WEB
• security.netapp.com/advisory/ntap-20240307-0009 · WEB
• openwall.com/lists/oss-security/2024/02/19/2 · WEB
• security.netapp.com/advisory/ntap-20240307-0009 · Third Party Advisory

org.apache.commons:commons-compress のその他の脆弱性

• CVE-2024-25710中 5.5Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: …
• CVE-2023-42503中 5.5Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apac…
• CVE-2021-36090高 7.5When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memor…
• CVE-2021-35517高 7.5When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memor…
• CVE-2021-35516高 7.5When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory…