CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 36.5%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2021-36373

Apache » Ant » Version: 1.10.0

cpe:2.3:a:apache:ant:1.10.0
Apache » Ant » Version: 1.10.1

cpe:2.3:a:apache:ant:1.10.1
Apache » Ant » Version: 1.10.10

cpe:2.3:a:apache:ant:1.10.10
Apache » Ant » Version: 1.10.2

cpe:2.3:a:apache:ant:1.10.2
Apache » Ant » Version: 1.10.3

cpe:2.3:a:apache:ant:1.10.3
Apache » Ant » Version: 1.10.4

cpe:2.3:a:apache:ant:1.10.4
Apache » Ant » Version: 1.10.5

cpe:2.3:a:apache:ant:1.10.5
Apache » Ant » Version: 1.10.6

cpe:2.3:a:apache:ant:1.10.6
Apache » Ant » Version: 1.10.7

cpe:2.3:a:apache:ant:1.10.7
Apache » Ant » Version: 1.10.8

cpe:2.3:a:apache:ant:1.10.8
Apache » Ant » Version: 1.10.9

cpe:2.3:a:apache:ant:1.10.9
Apache » Ant » Version: 1.9.0

cpe:2.3:a:apache:ant:1.9.0
Apache » Ant » Version: 1.9.1

cpe:2.3:a:apache:ant:1.9.1
Apache » Ant » Version: 1.9.10

cpe:2.3:a:apache:ant:1.9.10
Apache » Ant » Version: 1.9.11

cpe:2.3:a:apache:ant:1.9.11
Apache » Ant » Version: 1.9.12

cpe:2.3:a:apache:ant:1.9.12
Apache » Ant » Version: 1.9.13

cpe:2.3:a:apache:ant:1.9.13
Apache » Ant » Version: 1.9.14

cpe:2.3:a:apache:ant:1.9.14
Apache » Ant » Version: 1.9.15

cpe:2.3:a:apache:ant:1.9.15
Apache » Ant » Version: 1.9.2

cpe:2.3:a:apache:ant:1.9.2
Apache » Ant » Version: 1.9.3

cpe:2.3:a:apache:ant:1.9.3
Apache » Ant » Version: 1.9.4

cpe:2.3:a:apache:ant:1.9.4
Apache » Ant » Version: 1.9.5

cpe:2.3:a:apache:ant:1.9.5
Apache » Ant » Version: 1.9.6

cpe:2.3:a:apache:ant:1.9.6
Apache » Ant » Version: 1.9.7

cpe:2.3:a:apache:ant:1.9.7
Apache » Ant » Version: 1.9.8

cpe:2.3:a:apache:ant:1.9.8
Apache » Ant » Version: 1.9.9

cpe:2.3:a:apache:ant:1.9.9
Oracle » Agile Plm » Version: 9.3.6

cpe:2.3:a:oracle:agile_plm:9.3.6
Oracle » Banking Trade Finance » Version: 14.5

cpe:2.3:a:oracle:banking_trade_finance:14.5
Oracle » Banking Treasury Management » Version: 14.5

cpe:2.3:a:oracle:banking_treasury_management:14.5
Oracle » Communications Cloud Native Core Automated Test Suite » Version: 1.9.0

cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.9.0
Oracle » Communications Cloud Native Core Binding Support Function » Version: 1.11.0

cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0
Oracle » Communications Order And Service Management » Version: 7.3

cpe:2.3:a:oracle:communications_order_and_service_management:7.3
Oracle » Communications Order And Service Management » Version: 7.4

cpe:2.3:a:oracle:communications_order_and_service_management:7.4
Oracle » Communications Unified Inventory Management » Version: 7.3.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.0
Oracle » Communications Unified Inventory Management » Version: 7.4.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0
Oracle » Communications Unified Inventory Management » Version: 7.4.1

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1
Oracle » Communications Unified Inventory Management » Version: 7.4.2

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2
Oracle » Communications Unified Inventory Management » Version: 7.5.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.5.0
Oracle » Enterprise Repository » Version: 11.1.1.7.0

cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.0.1

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.1
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.3.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.3.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.4.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.4.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.8

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.8
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.8.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.8.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.9

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.9
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.9.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.9.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.1.0.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.0.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.1.1

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.1
Oracle » Insurance Policy Administration » Version: 11.0

cpe:2.3:a:oracle:insurance_policy_administration:11.0
Oracle » Insurance Policy Administration » Version: 11.0.2

cpe:2.3:a:oracle:insurance_policy_administration:11.0.2
Oracle » Insurance Policy Administration » Version: 11.1.0

cpe:2.3:a:oracle:insurance_policy_administration:11.1.0
Oracle » Insurance Policy Administration » Version: 11.2.0

cpe:2.3:a:oracle:insurance_policy_administration:11.2.0
Oracle » Insurance Policy Administration » Version: 11.2.7

cpe:2.3:a:oracle:insurance_policy_administration:11.2.7
Oracle » Insurance Policy Administration » Version: 11.2.8

cpe:2.3:a:oracle:insurance_policy_administration:11.2.8
Oracle » Insurance Policy Administration » Version: 11.3.0

cpe:2.3:a:oracle:insurance_policy_administration:11.3.0
Oracle » Insurance Policy Administration » Version: 11.3.1

cpe:2.3:a:oracle:insurance_policy_administration:11.3.1
Oracle » Primavera Gateway » Version: 17.12.0

cpe:2.3:a:oracle:primavera_gateway:17.12.0
Oracle » Primavera Gateway » Version: 17.12.10

cpe:2.3:a:oracle:primavera_gateway:17.12.10
Oracle » Primavera Gateway » Version: 17.12.11

cpe:2.3:a:oracle:primavera_gateway:17.12.11
Oracle » Primavera Gateway » Version: 17.12.6

cpe:2.3:a:oracle:primavera_gateway:17.12.6
Oracle » Primavera Gateway » Version: 17.12.7

cpe:2.3:a:oracle:primavera_gateway:17.12.7
Oracle » Primavera Gateway » Version: 17.12.8

cpe:2.3:a:oracle:primavera_gateway:17.12.8
Oracle » Primavera Gateway » Version: 17.12.9

cpe:2.3:a:oracle:primavera_gateway:17.12.9
Oracle » Primavera Gateway » Version: 18.8.0

cpe:2.3:a:oracle:primavera_gateway:18.8.0
Oracle » Primavera Gateway » Version: 18.8.11

cpe:2.3:a:oracle:primavera_gateway:18.8.11
Oracle » Primavera Gateway » Version: 18.8.12

cpe:2.3:a:oracle:primavera_gateway:18.8.12
Oracle » Primavera Gateway » Version: 18.8.8

cpe:2.3:a:oracle:primavera_gateway:18.8.8
Oracle » Primavera Gateway » Version: 18.8.8.1

cpe:2.3:a:oracle:primavera_gateway:18.8.8.1
Oracle » Primavera Gateway » Version: 18.8.9

cpe:2.3:a:oracle:primavera_gateway:18.8.9
Oracle » Primavera Gateway » Version: 19.12.0

cpe:2.3:a:oracle:primavera_gateway:19.12.0
Oracle » Primavera Gateway » Version: 19.12.10

cpe:2.3:a:oracle:primavera_gateway:19.12.10
Oracle » Primavera Gateway » Version: 19.12.11

cpe:2.3:a:oracle:primavera_gateway:19.12.11
Oracle » Primavera Gateway » Version: 19.12.4

cpe:2.3:a:oracle:primavera_gateway:19.12.4
Oracle » Primavera Gateway » Version: 20.12.0

cpe:2.3:a:oracle:primavera_gateway:20.12.0
Oracle » Primavera Gateway » Version: 20.12.7

cpe:2.3:a:oracle:primavera_gateway:20.12.7
Oracle » Primavera Unifier » Version: 17.10

cpe:2.3:a:oracle:primavera_unifier:17.10
Oracle » Primavera Unifier » Version: 17.11

cpe:2.3:a:oracle:primavera_unifier:17.11
Oracle » Primavera Unifier » Version: 17.12

cpe:2.3:a:oracle:primavera_unifier:17.12
Oracle » Primavera Unifier » Version: 17.7

cpe:2.3:a:oracle:primavera_unifier:17.7
Oracle » Primavera Unifier » Version: 17.8

cpe:2.3:a:oracle:primavera_unifier:17.8
Oracle » Primavera Unifier » Version: 17.9

cpe:2.3:a:oracle:primavera_unifier:17.9
Oracle » Primavera Unifier » Version: 18.8

cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle » Primavera Unifier » Version: 19.12

cpe:2.3:a:oracle:primavera_unifier:19.12
Oracle » Primavera Unifier » Version: 20.12

cpe:2.3:a:oracle:primavera_unifier:20.12
Oracle » Real-Time Decision Server » Version: 11.1.1.9.0

cpe:2.3:a:oracle:real-time_decision_server:11.1.1.9.0
Oracle » Real-Time Decision Server » Version: 3.2.0.0

cpe:2.3:a:oracle:real-time_decision_server:3.2.0.0
Oracle » Retail Advanced Inventory Planning » Version: 14.1

cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1
Oracle » Retail Advanced Inventory Planning » Version: 15.0

cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0
Oracle » Retail Advanced Inventory Planning » Version: 16.0

cpe:2.3:a:oracle:retail_advanced_inventory_planning:16.0
Oracle » Retail Back Office » Version: 14.0

cpe:2.3:a:oracle:retail_back_office:14.0
Oracle » Retail Back Office » Version: 14.1

cpe:2.3:a:oracle:retail_back_office:14.1
Oracle » Retail Bulk Data Integration » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0
Oracle » Retail Bulk Data Integration » Version: 19.0.1

cpe:2.3:a:oracle:retail_bulk_data_integration:19.0.1
Oracle » Retail Central Office » Version: 14.0

cpe:2.3:a:oracle:retail_central_office:14.0
Oracle » Retail Central Office » Version: 14.1

cpe:2.3:a:oracle:retail_central_office:14.1
Oracle » Retail Eftlink » Version: 19.0.1

cpe:2.3:a:oracle:retail_eftlink:19.0.1
Oracle » Retail Eftlink » Version: 20.0.1

cpe:2.3:a:oracle:retail_eftlink:20.0.1
Oracle » Retail Extract Transform And Load » Version: 13.2.8

cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2.8
Oracle » Retail Financial Integration » Version: 14.1.3.2

cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2
Oracle » Retail Financial Integration » Version: 15.0.4.0

cpe:2.3:a:oracle:retail_financial_integration:15.0.4.0
Oracle » Retail Financial Integration » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_financial_integration:16.0.3.0
Oracle » Retail Integration Bus » Version: 14.1.3.2

cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2
Oracle » Retail Integration Bus » Version: 15.0.4.0

cpe:2.3:a:oracle:retail_integration_bus:15.0.4.0
Oracle » Retail Integration Bus » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_integration_bus:16.0.3.0
Oracle » Retail Integration Bus » Version: 19.0.1.0

cpe:2.3:a:oracle:retail_integration_bus:19.0.1.0
Oracle » Retail Invoice Matching » Version: 16.0.3

cpe:2.3:a:oracle:retail_invoice_matching:16.0.3
Oracle » Retail Merchandising System » Version: 19.0.1

cpe:2.3:a:oracle:retail_merchandising_system:19.0.1
Oracle » Retail Point-Of-Service » Version: 14.0

cpe:2.3:a:oracle:retail_point-of-service:14.0
Oracle » Retail Point-Of-Service » Version: 14.1

cpe:2.3:a:oracle:retail_point-of-service:14.1
Oracle » Retail Predictive Application Server » Version: 14.1.3

cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3
Oracle » Retail Predictive Application Server » Version: 15.0.3

cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3
Oracle » Retail Predictive Application Server » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0
Oracle » Retail Service Backbone » Version: 14.1.3.2

cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2
Oracle » Retail Service Backbone » Version: 15.0.4.0

cpe:2.3:a:oracle:retail_service_backbone:15.0.4.0
Oracle » Retail Service Backbone » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_service_backbone:16.0.3.0
Oracle » Retail Service Backbone » Version: 19.0.1.0

cpe:2.3:a:oracle:retail_service_backbone:19.0.1.0
Oracle » Retail Store Inventory Management » Version: 14.1

cpe:2.3:a:oracle:retail_store_inventory_management:14.1
Oracle » Retail Store Inventory Management » Version: 15.0

cpe:2.3:a:oracle:retail_store_inventory_management:15.0
Oracle » Retail Store Inventory Management » Version: 16.0

cpe:2.3:a:oracle:retail_store_inventory_management:16.0
Oracle » Retail Xstore Point Of Service » Version: 16.0.6

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6
Oracle » Retail Xstore Point Of Service » Version: 17.0.4

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4
Oracle » Retail Xstore Point Of Service » Version: 18.0.3

cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3
Oracle » Retail Xstore Point Of Service » Version: 19.0.2

cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2
Oracle » Retail Xstore Point Of Service » Version: 20.0.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1
Oracle » Timesten In-Memory Database » Version: N/A

cpe:2.3:a:oracle:timesten_in-memory_database:-
Oracle » Utilities Framework » Version: 4.2.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.2.0.2.0
Oracle » Utilities Framework » Version: 4.2.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0
Oracle » Utilities Framework » Version: 4.3.0.1.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.1.0
Oracle » Utilities Framework » Version: 4.3.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.2.0
Oracle » Utilities Framework » Version: 4.3.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.3.0
Oracle » Utilities Framework » Version: 4.3.0.4

cpe:2.3:a:oracle:utilities_framework:4.3.0.4
Oracle » Utilities Framework » Version: 4.3.0.4.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.4.0
Oracle » Utilities Framework » Version: 4.3.0.5.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.5.0
Oracle » Utilities Framework » Version: 4.3.0.6.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.6.0
Oracle » Utilities Framework » Version: 4.4.0.0.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0
Oracle » Utilities Framework » Version: 4.4.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0
Oracle » Utilities Framework » Version: 4.4.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0
Oracle » Utilities Testing Accelerator » Version: 6.0.0.1.1

cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-36373

Products

Pricing

Contact Us