CVE-2024-26308CWE-770

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Medium · published February 19, 2024

CVSS v3.1
5.5
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.

Users are recommended to upgrade to version 1.26, which fixes the issue.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00898 · 59.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-02-19T08:31Z
EPSS history
Timeline
  • 19 FEB 08:31Z
    Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
    cvelistv5