PT-2024-26901 · Oracle · Jdk

Marcono1234 + 1 · Published 2024-05-29 · Updated 2024-06-02 · CVE-2024-36114

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Aircompressor versions prior to 0.27

Description The issue concerns the decompressor implementations of Aircompressor, including LZ4, LZO, Snappy, and Zstandard. These decompressors can crash the JVM for certain input and, in some cases, leak the content of other memory of the Java process, which could contain sensitive information. This occurs because the decompressors try to access memory outside the bounds of the given byte arrays or byte buffers, and Aircompressor uses the JDK class sun.misc.Unsafe to speed up memory access without performing additional bounds checks. As a result, this can lead to non-deterministic behavior or crash the JVM. When decompressing data from untrusted users, this can be exploited for a denial-of-service attack by crashing the JVM or to leak other sensitive information from the Java process.

Recommendations Update to Aircompressor 0.27 or newer where these issues have been fixed. As a temporary workaround, consider avoiding the decompression of data from untrusted users to minimize the risk of exploitation. Restrict access to sensitive information within the Java process to reduce the potential impact of a leak.

Exploit

Fix

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

CVE-2024-36114

GHSA-973X-65J7-XCF4

Affected Products

Jdk

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36114.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-36114 · Security Note
• https://osv.dev/vulnerability/CVE-2024-36114 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-973x-65j7-xcf4 · Vendor Advisory
• https://github.com/airlift/aircompressor · Note
• https://github.com/airlift/aircompressor/commit/2cea90a45534f9aacbb77426fb64e975504dee6e · Note
• https://github.com/airlift/aircompressor/commit/cf66151541edb062ea88b6f3baab3f95e48b7b7f · Note
• https://github.com/airlift/aircompressor/commit/15e68df9eb0c2bfde7f796231ee7cd1982965071 · Note
• https://github.com/airlift/aircompressor/security/advisories/GHSA-973x-65j7-xcf4 · Note
• https://github.com/airlift/aircompressor/commit/d01ecb779375a092d00e224abe7869cdf49ddc3e · Note
• https://t.me/cvenotify/81517 · Telegram Post
• https://t.me/cvenotify/81470 · Telegram Post