CVE-2026-33582

6.5 Moyenne

Publiée le 09/06/2026 à 11:16 · Modifiée le 23/07/2026 à 10:10 · Analysée par le NVD · Source : security@apache.org

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

Traduire en français

Produits concernés

Apache Software Foundation Apache Answer
Apache answer

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-434

Références

https://lists.apache.org/thread/3sgpx4cwsgpnt66xv3cqvtc8z4st1kbq Mailing ListVendor Advisory
http://www.openwall.com/lists/oss-security/2026/06/09/5 Mailing ListThird Party Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories