CVE-2021-36373
14.07.2021, 07:15
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | ant | 1.9.0 ≤ 𝑥 < 1.9.16 |
| apache | ant | 1.10.0 ≤ 𝑥 < 1.10.11 |
| oracle | agile_plm | 9.3.6 |
| oracle | banking_trade_finance | 14.5 |
| oracle | banking_treasury_management | 14.5 |
| oracle | communications_cloud_native_core_automated_test_suite | 1.9.0 |
| oracle | communications_cloud_native_core_binding_support_function | 1.11.0 |
| oracle | communications_order_and_service_management | 7.3 |
| oracle | communications_order_and_service_management | 7.4 |
| oracle | communications_unified_inventory_management | 7.3.0 |
| oracle | communications_unified_inventory_management | 7.4.0 |
| oracle | communications_unified_inventory_management | 7.4.1 |
| oracle | communications_unified_inventory_management | 7.4.2 |
| oracle | communications_unified_inventory_management | 7.5.0 |
| oracle | enterprise_repository | 11.1.1.7.0 |
| oracle | financial_services_analytical_applications_infrastructure | 8.0.6 ≤ 𝑥 ≤ 8.1.1 |
| oracle | insurance_policy_administration | 11.0 ≤ 𝑥 ≤ 11.3.1 |
| oracle | primavera_gateway | 17.12.0 ≤ 𝑥 ≤ 17.12.11 |
| oracle | primavera_gateway | 18.8.0 ≤ 𝑥 ≤ 18.8.12 |
| oracle | primavera_gateway | 19.12.0 ≤ 𝑥 ≤ 19.12.11 |
| oracle | primavera_gateway | 20.12.0 ≤ 𝑥 ≤ 20.12.7 |
| oracle | primavera_unifier | 17.7 ≤ 𝑥 ≤ 17.12 |
| oracle | primavera_unifier | 18.8 |
| oracle | primavera_unifier | 19.12 |
| oracle | primavera_unifier | 20.12 |
| oracle | real-time_decision_server | 3.2.0.0 |
| oracle | real-time_decision_server | 11.1.1.9.0 |
| oracle | retail_advanced_inventory_planning | 14.1 |
| oracle | retail_advanced_inventory_planning | 15.0 |
| oracle | retail_advanced_inventory_planning | 16.0 |
| oracle | retail_back_office | 14.0 |
| oracle | retail_back_office | 14.1 |
| oracle | retail_bulk_data_integration | 16.0.3.0 |
| oracle | retail_bulk_data_integration | 19.0.1 |
| oracle | retail_central_office | 14.0 |
| oracle | retail_central_office | 14.1 |
| oracle | retail_eftlink | 19.0.1 |
| oracle | retail_eftlink | 20.0.1 |
| oracle | retail_extract_transform_and_load | 13.2.8 |
| oracle | retail_financial_integration | 14.1.3.2 |
| oracle | retail_financial_integration | 15.0.4.0 |
| oracle | retail_financial_integration | 16.0.3.0 |
| oracle | retail_integration_bus | 14.1.3.2 |
| oracle | retail_integration_bus | 15.0.4.0 |
| oracle | retail_integration_bus | 16.0.3.0 |
| oracle | retail_integration_bus | 19.0.1.0 |
| oracle | retail_invoice_matching | 16.0.3 |
| oracle | retail_merchandising_system | 19.0.1 |
| oracle | retail_point-of-service | 14.0 |
| oracle | retail_point-of-service | 14.1 |
| oracle | retail_predictive_application_server | 14.1.3 |
| oracle | retail_predictive_application_server | 15.0.3 |
| oracle | retail_predictive_application_server | 16.0.3.0 |
| oracle | retail_service_backbone | 14.1.3.2 |
| oracle | retail_service_backbone | 15.0.4.0 |
| oracle | retail_service_backbone | 16.0.3.0 |
| oracle | retail_service_backbone | 19.0.1.0 |
| oracle | retail_store_inventory_management | 14.1 |
| oracle | retail_store_inventory_management | 15.0 |
| oracle | retail_store_inventory_management | 16.0 |
| oracle | retail_xstore_point_of_service | 16.0.6 |
| oracle | retail_xstore_point_of_service | 17.0.4 |
| oracle | retail_xstore_point_of_service | 18.0.3 |
| oracle | retail_xstore_point_of_service | 19.0.2 |
| oracle | retail_xstore_point_of_service | 20.0.1 |
| oracle | timesten_in-memory_database | 𝑥 < 11.2.2.8.27 |
| oracle | utilities_framework | 4.3.0.1.0 ≤ 𝑥 ≤ 4.3.0.6.0 |
| oracle | utilities_framework | 4.2.0.2.0 |
| oracle | utilities_framework | 4.2.0.3.0 |
| oracle | utilities_framework | 4.4.0.0.0 |
| oracle | utilities_framework | 4.4.0.2.0 |
| oracle | utilities_framework | 4.4.0.3.0 |
| oracle | utilities_testing_accelerator | 6.0.0.1.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References