CVE-2024-47554
EUVD-2024-297603.10.2024, 12:15
Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | commons_io | 2.0 ≤ 𝑥 < 2.14.0 |
| netapp | active_iq_unified_manager | - |
| netapp | active_iq_unified_manager | - |
| netapp | active_iq_unified_manager | - |
| netapp | bluexp | - |
| netapp | e-series_santricity_unified_manager | - |
| netapp | e-series_santricity_web_services_proxy | - |
| netapp | santricity_storage_plugin | - |
| netapp | snapcenter | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases