CVE-2023-24977
published 2023-02-01CVE-2023-24977: Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to…
PriorityP341high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
1.16%
63.6th percentile
Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214 https://github.com/apache/inlong/pull/7214 to solve it.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | inlong | 1.1.0 – 1.5.0 | — |
| apache_software_foundation | apache_inlong | 1.1.0 – 1.5.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache InLong contains Out-of-bounds Read vulnerability
ghsa·2023-02-01
CVE-2023-24977 [HIGH] CWE-125 Apache InLong contains Out-of-bounds Read vulnerability
Apache InLong contains Out-of-bounds Read vulnerability
Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214 to solve it.
OSV
Apache InLong contains Out-of-bounds Read vulnerability
osv·2023-02-01
CVE-2023-24977 [HIGH] Apache InLong contains Out-of-bounds Read vulnerability
Apache InLong contains Out-of-bounds Read vulnerability
Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214 to solve it.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-02-01
Published