CVE-2023-24977: Out-of-bounds Read vulnerability in Apache InLong
Summary
CVE-2023-24977: Apache InLong contains Out-of-bounds Read vulnerability. Affects org.apache.inlong:inlong versions >= 1.1.0, <= 1.5.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache InLong is an open-source project developed by the Apache Software Foundation. It is a distributed processing platform designed for real-time big data streaming and batch processing. Apache InLong provides a scalable and reliable solution for ingesting, processing, and analyzing large volumes of data. However, versions 1.1.0 through 1.5.0 of Apache InLong are vulnerable to an Out-of-bounds Read vulnerability.
Vulnerability Detail
The Out-of-bounds Read vulnerability in Apache InLong allows an attacker to read data from memory locations beyond the boundaries of an allocated buffer. This can lead to the exposure of sensitive information or the execution of arbitrary code. The vulnerability has a CVSS score of 7.5, indicating a high severity level. It was identified and reported by the Apache Software Foundation. The vulnerability affects versions 1.1.0 through 1.5.0 of Apache InLong.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the Out-of-bounds Read vulnerability in Apache InLong poses a significant risk to the security of your installation. It is crucial to upgrade to the latest version or apply the provided fix to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for org.apache.inlong:inlong →
FAQ
The vulnerability allows an attacker to read data from memory locations beyond the boundaries of an allocated buffer, potentially exposing sensitive information or executing arbitrary code.
Versions 1.1.0 through 1.5.0 of Apache InLong are affected by this vulnerability.
You can fix this vulnerability by upgrading to the latest version of Apache InLong or applying the fix provided in the mentioned pull request.
No specific workaround has been mentioned for this vulnerability.
The vulnerability was identified and reported by the Apache Software Foundation.
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.inlong:inlong.
