Red Hat Security Advisory

RHSA-2024:1509

Red Hat Data Grid 8.4.7 security update

Released 2024-03-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Data Grid

Fixes 2 records

TI-2024-16916 CVE-2024-25710 · GHSA-4g9r-vxhx-9pgx

Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file

LOW 36

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00441 Published 2024-02-19 Partial fix · 1.26.0 CWE-835

TI-2024-17389 CVE-2024-26308 · GHSA-4265-ccf5-phj5

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

LOW 27

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00898 Published 2024-02-19 Partial fix · 1.26.0 CWE-770