​
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-9w8c-c5fw-q342

Published

Last updated

https://images.chainguard.dev/security/CGA-9w8c-c5fw-q342
Package

kafka-jre-bcfips

Latest Update
Fixed
Fixed Version

3.8.0-r2

Aliases
  • CVE-2024-47554
  • GHSA-78wr-2p64-hpwj

Severity

7.5

High

CVSS V3

Summary

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Description

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images