Tracker / CVE-2021-36090
CVE-2021-36090
High 7.5
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.
Affected products and versions
| apache | commons_compress · 1.0 → 1.21 |
|---|---|
| netapp | active_iq_unified_manager |
| netapp | oncommand_insight |
| oracle | banking_apis |
| oracle | banking_apis · 18.1 → 18.3 |
| oracle | banking_digital_experience |
| oracle | banking_digital_experience · 18.1 → 18.3 |
| oracle | banking_enterprise_default_management |
| oracle | banking_party_management |
| oracle | banking_payments |
| oracle | banking_platform |
| oracle | banking_trade_finance |
| oracle | banking_treasury_management |
| oracle | business_process_management_suite |
| oracle | commerce_guided_search |
| oracle | communications_billing_and_revenue_management |
| oracle | communications_cloud_native_core_automated_test_suite |
| oracle | communications_cloud_native_core_service_communication_proxy |
| oracle | communications_cloud_native_core_unified_data_repository |
| oracle | communications_diameter_intelligence_hub |
| oracle | communications_diameter_intelligence_hub · 8.0.0 → 8.2.3 |
| oracle | communications_element_manager · 8.2.0 → 8.2.4.0 |
| oracle | communications_messaging_server |
| oracle | communications_session_report_manager · 8.2.0 → 8.2.5.0 |
| oracle | communications_session_route_manager · 8.0.0 → 8.2.5.0 |
| oracle | communications_unified_inventory_management |
| oracle | financial_services_analytical_applications_infrastructure · 8.0.6 → 8.1.1 |
| oracle | financial_services_crime_and_compliance_management_studio |
| oracle | financial_services_enterprise_case_management |
| oracle | flexcube_universal_banking |
| oracle | flexcube_universal_banking · 14.0.0 → 14.3.0 |
| oracle | healthcare_data_repository |
| oracle | insurance_policy_administration |
| oracle | peoplesoft_enterprise_peopletools |
| oracle | primavera_gateway · 17.12.0 → 17.12.11 |
| oracle | primavera_gateway · 18.8.0 → 18.8.12 |
| oracle | primavera_gateway · 19.12.0 → 19.12.11 |
| oracle | primavera_gateway · 20.12.0 → 20.12.7 |
| oracle | primavera_unifier |
| oracle | primavera_unifier · 17.7 → 17.12 |
| oracle | utilities_testing_accelerator |
| oracle | webcenter_portal |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.