Apache Commons Configuration: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 6.5
  CVE-2025-46392

  Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

  Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage pat…

  Apache Software Foundation Apache Commons Configuration commons-configuration commons-configuration:commons-configuration Debian Ubuntu Maven
  May 9, 2025

Revision history

1. 2026-08-31 #6

   Neue Updates von Dell aufgenommen

2. 2026-02-01 #5

   Neue Updates von IBM aufgenommen

3. 2025-10-05 #4

   Neue Updates aufgenommen

4. 2025-09-02 #3

   Neue Updates von IBM aufgenommen

5. 2025-07-06 #2

   Neue Updates von NetApp aufgenommen

6. 2025-05-11 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2025-05-11
  https://github.com/advisories/GHSA-pvp8-3xj6-8c6x
• Apache Pony Mail vom 2025-05-11
  https://lists.apache.org/thread/y1pl0mn3opz6kwkm873zshjdxq3dwq5s
• NetApp Security Advisory NTAP-20250704-0009 vom 2025-07-04
  https://security.netapp.com/advisory/NTAP-20250704-0009
• IBM Security Bulletin 7243781 vom 2025-09-02
  https://www.ibm.com/support/pages/node/7243781
• SAS Security Update vom 2025-10-02
  https://support.sas.com/en/security-bulletins/sas-security-update-for-sas-94m9-ts1m9.html
• IBM Security Bulletin 7259326 vom 2026-01-30
  https://www.ibm.com/support/pages/node/7259326
• Dell Security Advisory DSA-2026-386 vom 2026-09-01
  https://www.dell.com/support/kbdoc/000503504/dsa-2026-386-security-update-f