CVE-2024-23082: Integer Overflow
ThreeTen Backport is vulnerable to a denial of service, caused by an integer overflow in the org.threeten.bp.format.DateTimeFormatter::parse(CharSequence, ParsePosition) component. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.
Other sources
ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTimeFormatter::parse(CharSequence, ParsePosition). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23082?
CVE-2024-23082 has a high severity rating due to its potential to cause a denial of service.
How do I fix CVE-2024-23082?
To fix CVE-2024-23082, ensure that you update to the latest version of ThreeTen Backport that addresses this vulnerability.
Which software is affected by CVE-2024-23082?
CVE-2024-23082 affects IBM Planning Analytics Local - IBM Planning Analytics Workspace versions 2.0 and 2.1.
What type of vulnerability is CVE-2024-23082?
CVE-2024-23082 is a denial of service vulnerability caused by an integer overflow in the DateTimeFormatter component.
Can CVE-2024-23082 be exploited remotely?
Yes, CVE-2024-23082 can be exploited remotely by sending specially crafted requests to the affected software.