PT-2023-35938 · Apache · Apache Commons Io

Publicado 2023-08-08 · Atualizado 2023-08-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Apache Commons IO (affected versions not specified)

Description The issue is related to a security exception in the Apache Commons IO library. The crash occurs in the byteArray method of org.apache.commons.io.IOUtils, which is called by org.apache.commons.io.output.AbstractByteArrayOutputStream.needNewBuffer and org.apache.commons.io.output.UnsynchronizedByteArrayOutputStream.<init>. No information is available about the estimated number of potentially affected devices or real-world incidents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

OSV-2023-662

Produtos afetados

Apache Commons Io

Referências · 2

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61254 · Nota
• https://osv.dev/vulnerability/OSV-2023-662 · Aviso do Fabricante