CVE-2021-36373

CVSS v3.1 5.5 (Medium)

CVSS v2.0 4.3 (Medium)

EPSS 0.11 % (45^th)

Affected Products 32

Advisories 6

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

Weaknesses

CWE-130: Improper Handling of Length Parameter Inconsistency
CWE-NVD-Other

CVE Status: PUBLISHED
CNA: Apache Software Foundation
Published Date: 2021-07-14 07:15:08
(3 years ago)
Updated Date: 2023-11-07 03:36:45
(10 months ago)

Affected Products

Apache

Oracle

Configuration #1

		CPE23	From	Up To
	Apache Ant from 1.9.0 version and prior 1.9.16 version	cpe:2.3:a:apache:ant	>= 1.9.0	< 1.9.16
	Apache Ant from 1.10.0 version and prior 1.10.11 version	cpe:2.3:a:apache:ant	>= 1.10.0	< 1.10.11

Configuration #2

	CPE23	From	Up To
Oracle Agile Plm 9.3.6	cpe:2.3:a:oracle:agile_plm:9.3.6
Oracle Banking Trade Finance 14.5	cpe:2.3:a:oracle:banking_trade_finance:14.5
Oracle Banking Treasury Management 14.5	cpe:2.3:a:oracle:banking_treasury_management:14.5
Oracle Communications Cloud Native Core Automated Test Suite 1.9.0	cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.9.0
Oracle Communications Cloud Native Core Binding Support Function 1.11.0	cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0
Oracle Communications Order And Service Management 7.3	cpe:2.3:a:oracle:communications_order_and_service_management:7.3
Oracle Communications Order And Service Management 7.4	cpe:2.3:a:oracle:communications_order_and_service_management:7.4
Oracle Communications Unified Inventory Management 7.3.0	cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.0
Oracle Communications Unified Inventory Management 7.4.0	cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0
Oracle Communications Unified Inventory Management 7.4.1	cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1
Oracle Communications Unified Inventory Management 7.4.2	cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2
Oracle Communications Unified Inventory Management 7.5.0	cpe:2.3:a:oracle:communications_unified_inventory_management:7.5.0
Oracle Enterprise Repository 11.1.1.7.0	cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0
Oracle Financial Services Analytical Applications Infrastructure from 8.0.6 version and 8.1.1 and prior versions	cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure	>= 8.0.6	<= 8.1.1
Oracle Insurance Policy Administration from 11.0 version and 11.3.1 and prior versions	cpe:2.3:a:oracle:insurance_policy_administration	>= 11.0	<= 11.3.1
Oracle Primavera Gateway from 17.12.0 version and 17.12.11 and prior versions	cpe:2.3:a:oracle:primavera_gateway	>= 17.12.0	<= 17.12.11
Oracle Primavera Gateway from 18.8.0 version and 18.8.12 and prior versions	cpe:2.3:a:oracle:primavera_gateway	>= 18.8.0	<= 18.8.12
Oracle Primavera Gateway from 19.12.0 version and 19.12.11 and prior versions	cpe:2.3:a:oracle:primavera_gateway	>= 19.12.0	<= 19.12.11
Oracle Primavera Gateway from 20.12.0 version and 20.12.7 and prior versions	cpe:2.3:a:oracle:primavera_gateway	>= 20.12.0	<= 20.12.7
Oracle Primavera Unifier from 17.7 version and 17.12 and prior versions	cpe:2.3:a:oracle:primavera_unifier	>= 17.7	<= 17.12
Oracle Primavera Unifier 18.8	cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle Primavera Unifier 19.12	cpe:2.3:a:oracle:primavera_unifier:19.12
Oracle Primavera Unifier 20.12	cpe:2.3:a:oracle:primavera_unifier:20.12
Oracle Real-time Decision Server 3.2.0.0	cpe:2.3:a:oracle:real-time_decision_server:3.2.0.0
Oracle Real-time Decision Server 11.1.1.9.0	cpe:2.3:a:oracle:real-time_decision_server:11.1.1.9.0
Oracle Retail Advanced Inventory Planning 14.1	cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1
Oracle Retail Advanced Inventory Planning 15.0	cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0
Oracle Retail Advanced Inventory Planning 16.0	cpe:2.3:a:oracle:retail_advanced_inventory_planning:16.0
Oracle Retail Back Office 14.0	cpe:2.3:a:oracle:retail_back_office:14.0
Oracle Retail Back Office 14.1	cpe:2.3:a:oracle:retail_back_office:14.1
Oracle Retail Bulk Data Integration 16.0.3.0	cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0
Oracle Retail Bulk Data Integration 19.0.1	cpe:2.3:a:oracle:retail_bulk_data_integration:19.0.1
Oracle Retail Central Office 14.0	cpe:2.3:a:oracle:retail_central_office:14.0
Oracle Retail Central Office 14.1	cpe:2.3:a:oracle:retail_central_office:14.1
Oracle Retail Eftlink 19.0.1	cpe:2.3:a:oracle:retail_eftlink:19.0.1
Oracle Retail Eftlink 20.0.1	cpe:2.3:a:oracle:retail_eftlink:20.0.1
Oracle Retail Extract Transform And Load 13.2.8	cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2.8
Oracle Retail Financial Integration 14.1.3.2	cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2
Oracle Retail Financial Integration 15.0.4.0	cpe:2.3:a:oracle:retail_financial_integration:15.0.4.0
Oracle Retail Financial Integration 16.0.3.0	cpe:2.3:a:oracle:retail_financial_integration:16.0.3.0
Oracle Retail Integration Bus 14.1.3.2	cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2
Oracle Retail Integration Bus 15.0.4.0	cpe:2.3:a:oracle:retail_integration_bus:15.0.4.0
Oracle Retail Integration Bus 16.0.3.0	cpe:2.3:a:oracle:retail_integration_bus:16.0.3.0
Oracle Retail Integration Bus 19.0.1.0	cpe:2.3:a:oracle:retail_integration_bus:19.0.1.0
Oracle Retail Invoice Matching 16.0.3	cpe:2.3:a:oracle:retail_invoice_matching:16.0.3
Oracle Retail Merchandising System 19.0.1	cpe:2.3:a:oracle:retail_merchandising_system:19.0.1
Oracle Retail Point-of-service 14.0	cpe:2.3:a:oracle:retail_point-of-service:14.0
Oracle Retail Point-of-service 14.1	cpe:2.3:a:oracle:retail_point-of-service:14.1
Oracle Retail Predictive Application Server 14.1.3	cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3
Oracle Retail Predictive Application Server 15.0.3	cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3
Oracle Retail Predictive Application Server 16.0.3.0	cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0
Oracle Retail Service Backbone 14.1.3.2	cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2
Oracle Retail Service Backbone 15.0.4.0	cpe:2.3:a:oracle:retail_service_backbone:15.0.4.0
Oracle Retail Service Backbone 16.0.3.0	cpe:2.3:a:oracle:retail_service_backbone:16.0.3.0
Oracle Retail Service Backbone 19.0.1.0	cpe:2.3:a:oracle:retail_service_backbone:19.0.1.0
Oracle Retail Store Inventory Management 14.1	cpe:2.3:a:oracle:retail_store_inventory_management:14.1
Oracle Retail Store Inventory Management 15.0	cpe:2.3:a:oracle:retail_store_inventory_management:15.0
Oracle Retail Store Inventory Management 16.0	cpe:2.3:a:oracle:retail_store_inventory_management:16.0
Oracle Retail Xstore Point Of Service 16.0.6	cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6
Oracle Retail Xstore Point Of Service 17.0.4	cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4
Oracle Retail Xstore Point Of Service 18.0.3	cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3
Oracle Retail Xstore Point Of Service 19.0.2	cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2
Oracle Retail Xstore Point Of Service 20.0.1	cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1
Oracle Timesten In-memory Database prior 11.2.2.8.27 version	cpe:2.3:a:oracle:timesten_in-memory_database		< 11.2.2.8.27
Oracle Utilities Framework from 4.3.0.1.0 version and 4.3.0.6.0 and prior versions	cpe:2.3:a:oracle:utilities_framework	>= 4.3.0.1.0	<= 4.3.0.6.0
Oracle Utilities Framework 4.2.0.2.0	cpe:2.3:a:oracle:utilities_framework:4.2.0.2.0
Oracle Utilities Framework 4.2.0.3.0	cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0
Oracle Utilities Framework 4.4.0.0.0	cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0
Oracle Utilities Framework 4.4.0.2.0	cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0
Oracle Utilities Framework 4.4.0.3.0	cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0
Oracle Utilities Testing Accelerator 6.0.0.1.1	cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.1.1