关键漏洞信息 CVE ID: CVE-2024-29133 发布日期: 2024-03-21 更新日期: 2024-05-01 CNA: Apache Software Foundation 标题: Apache Commons Configuration: StackOverflowError Calling ListDelimiterHandler.Flatten(Object, Int) With A Cyclic Object Tree 描述: 在Apache Commons Configuration中存在越界写入漏洞。此问题影响从2.0到2.10.1之前的版本。建议用户升级到2.10.1版本以修复该问题。 CVE类型: CWE-787: Out-of-bounds Write 受影响版本: 2.0 到 2.10.1 发现者: Gary Gregory 参考链接: - https://lists.apache.org/thread/ccb9w15bscznh6tnp3wsvrir8crbszh2 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YD4AFTIIQW662LUAQRMWS6BBKYSZG3YSI/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNKDKEEKZNL5FGCTZKJ6CFXFVWFL5FJ7I/ - http://www.openwall.com/lists/oss-security/2024/03/20/3