Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-26308 · ADVISORY
• apache/commons-compress · PACKAGE
• lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg · WEB
• security.netapp.com/advisory/ntap-20240307-0009 · WEB
• openwall.com/lists/oss-security/2024/02/19/2 · WEB
• security.netapp.com/advisory/ntap-20240307-0009 · Third Party Advisory

org.apache.commons:commons-compress의 다른 취약점

• CVE-2024-25710보통 5.5Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: …
• CVE-2023-42503보통 5.5Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apac…
• CVE-2021-36090높음 7.5When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memor…
• CVE-2021-35517높음 7.5When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memor…
• CVE-2021-35516높음 7.5When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory…