← CVE Intelligence

CVE-2024-26308

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file PUBLISHED

Description (CNA)

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Commons Compressaffected 1.21 before 1.26.0

CWE

CWE-770

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.