Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
apache / ant 1.10.0 1.10.11
apache / ant 1.9.0 1.9.16
oracle / retail_store_inventory_management 14.1 14.1.x
oracle / enterprise_repository 11.1.1.7.0 11.1.1.7.0.x
oracle / retail_back_office 14.1 14.1.x
oracle / retail_back_office 14.0 14.0.x
oracle / utilities_framework 4.2.0.3.0 4.2.0.3.0.x
oracle / utilities_framework 4.2.0.2.0 4.2.0.2.0.x
oracle / retail_central_office 14.0 14.0.x
oracle / retail_central_office 14.1 14.1.x
oracle / primavera_unifier 18.8 18.8.x
oracle / retail_point-of-service 14.1 14.1.x
oracle / retail_point-of-service 14.0 14.0.x
oracle / retail_predictive_application_server 15.0.3 15.0.3.x
oracle / primavera_unifier 17.7 17.12.x
oracle / utilities_framework 4.4.0.0.0 4.4.0.0.0.x
oracle / agile_plm 9.3.6 9.3.6.x
oracle / communications_unified_inventory_management 7.4.0 7.4.0.x
oracle / retail_store_inventory_management 16.0 16.0.x
oracle / primavera_unifier 19.12 19.12.x
oracle / utilities_framework 4.3.0.1.0 4.3.0.6.0.x
oracle / utilities_framework 4.4.0.2.0 4.4.0.2.0.x
oracle / communications_unified_inventory_management 7.3.0 7.3.0.x
oracle / retail_advanced_inventory_planning 14.1 14.1.x
oracle / retail_bulk_data_integration 16.0.3.0 16.0.3.0.x
oracle / retail_predictive_application_server 16.0.3.0 16.0.3.0.x
oracle / primavera_unifier 20.12 20.12.x
oracle / communications_order_and_service_management 7.4 7.4.x
oracle / communications_unified_inventory_management 7.4.1 7.4.1.x
oracle / retail_xstore_point_of_service 16.0.6 16.0.6.x
oracle / retail_xstore_point_of_service 17.0.4 17.0.4.x
oracle / retail_xstore_point_of_service 18.0.3 18.0.3.x
oracle / retail_xstore_point_of_service 19.0.2 19.0.2.x
oracle / retail_xstore_point_of_service 20.0.1 20.0.1.x
oracle / retail_service_backbone 14.1.3.2 14.1.3.2.x
oracle / primavera_gateway 17.12.0 17.12.11.x
oracle / utilities_framework 4.4.0.3.0 4.4.0.3.0.x
oracle / primavera_gateway 20.12.0 20.12.7.x
oracle / primavera_gateway 19.12.0 19.12.11.x
oracle / primavera_gateway 18.8.0 18.8.12.x
oracle / financial_services_analytical_applications_infrastructure 8.0.6 8.1.1.x
oracle / insurance_policy_administration 11.0 11.3.1.x
oracle / real-time_decision_server 3.2.0.0 3.2.0.0.x
oracle / retail_service_backbone 15.0.4.0 15.0.4.0.x
oracle / retail_service_backbone 16.0.3.0 16.0.3.0.x
oracle / retail_service_backbone 19.0.1.0 19.0.1.0.x
oracle / retail_merchandising_system 19.0.1 19.0.1.x
oracle / retail_integration_bus 14.1.3.2 14.1.3.2.x
oracle / retail_integration_bus 15.0.4.0 15.0.4.0.x
oracle / retail_integration_bus 16.0.3.0 16.0.3.0.x
oracle / retail_store_inventory_management 15.0 15.0.x
oracle / retail_integration_bus 19.0.1.0 19.0.1.0.x
oracle / retail_predictive_application_server 14.1.3 14.1.3.x
oracle / retail_financial_integration 14.1.3.2 14.1.3.2.x
oracle / retail_financial_integration 15.0.4.0 15.0.4.0.x
oracle / retail_financial_integration 16.0.3.0 16.0.3.0.x
oracle / retail_extract_transform_and_load 13.2.8 13.2.8.x
oracle / retail_bulk_data_integration 19.0.1 19.0.1.x
oracle / retail_advanced_inventory_planning 15.0 15.0.x
oracle / retail_advanced_inventory_planning 16.0 16.0.x
oracle / real-time_decision_server 11.1.1.9.0 11.1.1.9.0.x
oracle / retail_eftlink 19.0.1 19.0.1.x
oracle / communications_order_and_service_management 7.3 7.3.x
oracle / utilities_testing_accelerator 6.0.0.1.1 6.0.0.1.1.x
oracle / retail_invoice_matching 16.0.3 16.0.3.x
oracle / retail_eftlink 20.0.1 20.0.1.x
oracle / communications_unified_inventory_management 7.4.2 7.4.2.x
oracle / communications_unified_inventory_management 7.5.0 7.5.0.x
oracle / timesten_in-memory_database - 11.2.2.8.27
oracle / communications_cloud_native_core_automated_test_suite 1.9.0 1.9.0.x
oracle / communications_cloud_native_core_binding_support_function 1.11.0 1.11.0.x
oracle / banking_trade_finance 14.5 14.5.x
oracle / banking_treasury_management 14.5 14.5.x
org.apache.ant / ant - 1.9.16
org.apache.ant / ant 1.10.0 1.10.11