Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-29131 · ADVISORY
• apache/commons-configuration commit 56b5c4d · WEB
• apache/commons-configuration · PACKAGE
• issues.apache.org/jira/browse/CONFIGURATION-840 · WEB
• lists.apache.org/thread/03nzzzjn4oknyw5y0871tw7ltj0t3r37 · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/SNKDKEEKZNL5FGCTZKJ6CFXFVWFL5FJ7 · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/YD4AFTIIQW662LUAQRMWS6BBKYSZG3YS · WEB
• security.netapp.com/advisory/ntap-20241213-0001 · WEB
• openwall.com/lists/oss-security/2024/03/20/4 · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/SNKDKEEKZNL5FGCTZKJ6CFXFVWFL5FJ7

Lỗ hổng khác của org.apache.commons:commons-configuration2

• CVE-2026-45205TRUNG BÌNH 5.3Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a…
• CVE-2024-29133TRUNG BÌNH 5.4Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. …
• CVE-2022-33980NGHIÊM TRỌNG 9.8Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard for…
• CVE-2020-1953NGHIÊM TRỌNG 10.0Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML…