Summary
It was discovered that Apache Commons IO's XmlStreamReader class
could excessively consume CPU resources under certain circumstances. An
attacker could possibly use this issue to cause Apache Commons IO
to crash, resulting in a denial of service.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | commons-io | 2.4-2ubuntu0.1~esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | commons-io | 2.4-2ubuntu0.16.04.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | commons-io | 2.6-2ubuntu0.18.04.1+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | commons-io | 2.6-2ubuntu0.20.04.1+esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | commons-io | 2.11.0-2ubuntu0.22.04.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | commons-io | 2.11.0-2ubuntu0.24.04.1~esm1 |
References
-
report
https://ubuntu.com/security/CVE-2024-47554