CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 36.7%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2021-36374

Apache » Ant » Version: 1.10.0

cpe:2.3:a:apache:ant:1.10.0
Apache » Ant » Version: 1.10.1

cpe:2.3:a:apache:ant:1.10.1
Apache » Ant » Version: 1.10.10

cpe:2.3:a:apache:ant:1.10.10
Apache » Ant » Version: 1.10.2

cpe:2.3:a:apache:ant:1.10.2
Apache » Ant » Version: 1.10.3

cpe:2.3:a:apache:ant:1.10.3
Apache » Ant » Version: 1.10.4

cpe:2.3:a:apache:ant:1.10.4
Apache » Ant » Version: 1.10.5

cpe:2.3:a:apache:ant:1.10.5
Apache » Ant » Version: 1.10.6

cpe:2.3:a:apache:ant:1.10.6
Apache » Ant » Version: 1.10.7

cpe:2.3:a:apache:ant:1.10.7
Apache » Ant » Version: 1.10.8

cpe:2.3:a:apache:ant:1.10.8
Apache » Ant » Version: 1.10.9

cpe:2.3:a:apache:ant:1.10.9
Apache » Ant » Version: 1.9.0

cpe:2.3:a:apache:ant:1.9.0
Apache » Ant » Version: 1.9.1

cpe:2.3:a:apache:ant:1.9.1
Apache » Ant » Version: 1.9.10

cpe:2.3:a:apache:ant:1.9.10
Apache » Ant » Version: 1.9.11

cpe:2.3:a:apache:ant:1.9.11
Apache » Ant » Version: 1.9.12

cpe:2.3:a:apache:ant:1.9.12
Apache » Ant » Version: 1.9.13

cpe:2.3:a:apache:ant:1.9.13
Apache » Ant » Version: 1.9.14

cpe:2.3:a:apache:ant:1.9.14
Apache » Ant » Version: 1.9.15

cpe:2.3:a:apache:ant:1.9.15
Apache » Ant » Version: 1.9.2

cpe:2.3:a:apache:ant:1.9.2
Apache » Ant » Version: 1.9.3

cpe:2.3:a:apache:ant:1.9.3
Apache » Ant » Version: 1.9.4

cpe:2.3:a:apache:ant:1.9.4
Apache » Ant » Version: 1.9.5

cpe:2.3:a:apache:ant:1.9.5
Apache » Ant » Version: 1.9.6

cpe:2.3:a:apache:ant:1.9.6
Apache » Ant » Version: 1.9.7

cpe:2.3:a:apache:ant:1.9.7
Apache » Ant » Version: 1.9.8

cpe:2.3:a:apache:ant:1.9.8
Apache » Ant » Version: 1.9.9

cpe:2.3:a:apache:ant:1.9.9
Oracle » Agile Engineering Data Management » Version: 6.2.1.0

cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0
Oracle » Agile Plm » Version: 9.3.6

cpe:2.3:a:oracle:agile_plm:9.3.6
Oracle » Banking Trade Finance » Version: 14.5

cpe:2.3:a:oracle:banking_trade_finance:14.5
Oracle » Banking Treasury Management » Version: 14.5

cpe:2.3:a:oracle:banking_treasury_management:14.5
Oracle » Communications Cloud Native Core Automated Test Suite » Version: 1.9.0

cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.9.0
Oracle » Communications Cloud Native Core Binding Support Function » Version: 1.11.0

cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0
Oracle » Communications Diameter Intelligence Hub » Version: 8.0.0

cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.0.0
Oracle » Communications Diameter Intelligence Hub » Version: 8.1.0

cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.1.0
Oracle » Communications Diameter Intelligence Hub » Version: 8.2.0

cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.2.0
Oracle » Communications Diameter Intelligence Hub » Version: 8.2.3

cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.2.3
Oracle » Communications Order And Service Management » Version: 7.3

cpe:2.3:a:oracle:communications_order_and_service_management:7.3
Oracle » Communications Order And Service Management » Version: 7.4

cpe:2.3:a:oracle:communications_order_and_service_management:7.4
Oracle » Communications Unified Inventory Management » Version: 7.3.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.0
Oracle » Communications Unified Inventory Management » Version: 7.4.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0
Oracle » Communications Unified Inventory Management » Version: 7.4.1

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1
Oracle » Communications Unified Inventory Management » Version: 7.4.2

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2
Oracle » Communications Unified Inventory Management » Version: 7.5.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.5.0
Oracle » Enterprise Repository » Version: 11.1.1.7.0

cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.0.1

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.1
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.3.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.3.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.4.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.4.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.8

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.8
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.8

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.8
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.8.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.8.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.8.5

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.8.5
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.8.6

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.8.6
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.9

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.9
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.9.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.9.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.1.0.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.0.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.1.1

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.1
Oracle » Health Sciences Information Manager » Version: 3.0.0.1

cpe:2.3:a:oracle:health_sciences_information_manager:3.0.0.1
Oracle » Health Sciences Information Manager » Version: 3.0.1

cpe:2.3:a:oracle:health_sciences_information_manager:3.0.1
Oracle » Health Sciences Information Manager » Version: 3.0.2

cpe:2.3:a:oracle:health_sciences_information_manager:3.0.2
Oracle » Health Sciences Information Manager » Version: 3.0.3

cpe:2.3:a:oracle:health_sciences_information_manager:3.0.3
Oracle » Health Sciences Information Manager » Version: 3.0.4

cpe:2.3:a:oracle:health_sciences_information_manager:3.0.4
Oracle » Health Sciences Information Manager » Version: 3.0.5

cpe:2.3:a:oracle:health_sciences_information_manager:3.0.5
Oracle » Insurance Policy Administration » Version: 11.0

cpe:2.3:a:oracle:insurance_policy_administration:11.0
Oracle » Insurance Policy Administration » Version: 11.0.2

cpe:2.3:a:oracle:insurance_policy_administration:11.0.2
Oracle » Insurance Policy Administration » Version: 11.1.0

cpe:2.3:a:oracle:insurance_policy_administration:11.1.0
Oracle » Insurance Policy Administration » Version: 11.2.0

cpe:2.3:a:oracle:insurance_policy_administration:11.2.0
Oracle » Insurance Policy Administration » Version: 11.2.7

cpe:2.3:a:oracle:insurance_policy_administration:11.2.7
Oracle » Insurance Policy Administration » Version: 11.2.8

cpe:2.3:a:oracle:insurance_policy_administration:11.2.8
Oracle » Insurance Policy Administration » Version: 11.3.0

cpe:2.3:a:oracle:insurance_policy_administration:11.3.0
Oracle » Insurance Policy Administration » Version: 11.3.1

cpe:2.3:a:oracle:insurance_policy_administration:11.3.1
Oracle » Primavera Gateway » Version: 17.12.0

cpe:2.3:a:oracle:primavera_gateway:17.12.0
Oracle » Primavera Gateway » Version: 17.12.10

cpe:2.3:a:oracle:primavera_gateway:17.12.10
Oracle » Primavera Gateway » Version: 17.12.11

cpe:2.3:a:oracle:primavera_gateway:17.12.11
Oracle » Primavera Gateway » Version: 17.12.6

cpe:2.3:a:oracle:primavera_gateway:17.12.6
Oracle » Primavera Gateway » Version: 17.12.7

cpe:2.3:a:oracle:primavera_gateway:17.12.7
Oracle » Primavera Gateway » Version: 17.12.8

cpe:2.3:a:oracle:primavera_gateway:17.12.8
Oracle » Primavera Gateway » Version: 17.12.9

cpe:2.3:a:oracle:primavera_gateway:17.12.9
Oracle » Primavera Gateway » Version: 18.8.0

cpe:2.3:a:oracle:primavera_gateway:18.8.0
Oracle » Primavera Gateway » Version: 18.8.11

cpe:2.3:a:oracle:primavera_gateway:18.8.11
Oracle » Primavera Gateway » Version: 18.8.12

cpe:2.3:a:oracle:primavera_gateway:18.8.12
Oracle » Primavera Gateway » Version: 18.8.8

cpe:2.3:a:oracle:primavera_gateway:18.8.8
Oracle » Primavera Gateway » Version: 18.8.8.1

cpe:2.3:a:oracle:primavera_gateway:18.8.8.1
Oracle » Primavera Gateway » Version: 18.8.9

cpe:2.3:a:oracle:primavera_gateway:18.8.9
Oracle » Primavera Gateway » Version: 19.12.0

cpe:2.3:a:oracle:primavera_gateway:19.12.0
Oracle » Primavera Gateway » Version: 19.12.10

cpe:2.3:a:oracle:primavera_gateway:19.12.10
Oracle » Primavera Gateway » Version: 19.12.11

cpe:2.3:a:oracle:primavera_gateway:19.12.11
Oracle » Primavera Gateway » Version: 19.12.4

cpe:2.3:a:oracle:primavera_gateway:19.12.4
Oracle » Primavera Gateway » Version: 20.12.0

cpe:2.3:a:oracle:primavera_gateway:20.12.0
Oracle » Primavera Gateway » Version: 20.12.7

cpe:2.3:a:oracle:primavera_gateway:20.12.7
Oracle » Primavera Unifier » Version: 17.10

cpe:2.3:a:oracle:primavera_unifier:17.10
Oracle » Primavera Unifier » Version: 17.11

cpe:2.3:a:oracle:primavera_unifier:17.11
Oracle » Primavera Unifier » Version: 17.12

cpe:2.3:a:oracle:primavera_unifier:17.12
Oracle » Primavera Unifier » Version: 17.7

cpe:2.3:a:oracle:primavera_unifier:17.7
Oracle » Primavera Unifier » Version: 17.8

cpe:2.3:a:oracle:primavera_unifier:17.8
Oracle » Primavera Unifier » Version: 17.9

cpe:2.3:a:oracle:primavera_unifier:17.9
Oracle » Primavera Unifier » Version: 18.8

cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle » Primavera Unifier » Version: 19.12

cpe:2.3:a:oracle:primavera_unifier:19.12
Oracle » Primavera Unifier » Version: 20.12

cpe:2.3:a:oracle:primavera_unifier:20.12
Oracle » Product Lifecycle Analytics » Version: 3.6.1

cpe:2.3:a:oracle:product_lifecycle_analytics:3.6.1
Oracle » Real-Time Decision Server » Version: 11.1.1.9.0

cpe:2.3:a:oracle:real-time_decision_server:11.1.1.9.0
Oracle » Real-Time Decision Server » Version: 3.2.0.0

cpe:2.3:a:oracle:real-time_decision_server:3.2.0.0
Oracle » Retail Advanced Inventory Planning » Version: 14.1

cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1
Oracle » Retail Advanced Inventory Planning » Version: 15.0

cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0
Oracle » Retail Advanced Inventory Planning » Version: 16.0

cpe:2.3:a:oracle:retail_advanced_inventory_planning:16.0
Oracle » Retail Back Office » Version: 14.0

cpe:2.3:a:oracle:retail_back_office:14.0
Oracle » Retail Back Office » Version: 14.1

cpe:2.3:a:oracle:retail_back_office:14.1
Oracle » Retail Bulk Data Integration » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0
Oracle » Retail Bulk Data Integration » Version: 19.0.1

cpe:2.3:a:oracle:retail_bulk_data_integration:19.0.1
Oracle » Retail Central Office » Version: 14.0

cpe:2.3:a:oracle:retail_central_office:14.0
Oracle » Retail Central Office » Version: 14.1

cpe:2.3:a:oracle:retail_central_office:14.1
Oracle » Retail Eftlink » Version: 19.0.1

cpe:2.3:a:oracle:retail_eftlink:19.0.1
Oracle » Retail Eftlink » Version: 20.0.1

cpe:2.3:a:oracle:retail_eftlink:20.0.1
Oracle » Retail Extract Transform And Load » Version: 13.2.8

cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2.8
Oracle » Retail Financial Integration » Version: 14.1.3.2

cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2
Oracle » Retail Financial Integration » Version: 15.0.4.0

cpe:2.3:a:oracle:retail_financial_integration:15.0.4.0
Oracle » Retail Financial Integration » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_financial_integration:16.0.3.0
Oracle » Retail Integration Bus » Version: 14.1.3.2

cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2
Oracle » Retail Integration Bus » Version: 15.0.4.0

cpe:2.3:a:oracle:retail_integration_bus:15.0.4.0
Oracle » Retail Integration Bus » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_integration_bus:16.0.3.0
Oracle » Retail Integration Bus » Version: 19.0.1.0

cpe:2.3:a:oracle:retail_integration_bus:19.0.1.0
Oracle » Retail Invoice Matching » Version: 16.0.3

cpe:2.3:a:oracle:retail_invoice_matching:16.0.3
Oracle » Retail Merchandising System » Version: 19.0.1

cpe:2.3:a:oracle:retail_merchandising_system:19.0.1
Oracle » Retail Point-Of-Service » Version: 14.0

cpe:2.3:a:oracle:retail_point-of-service:14.0
Oracle » Retail Point-Of-Service » Version: 14.1

cpe:2.3:a:oracle:retail_point-of-service:14.1
Oracle » Retail Predictive Application Server » Version: 14.1.3

cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3
Oracle » Retail Predictive Application Server » Version: 15.0.3

cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3
Oracle » Retail Predictive Application Server » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0
Oracle » Retail Service Backbone » Version: 14.1.3.2

cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2
Oracle » Retail Service Backbone » Version: 15.0.4.0

cpe:2.3:a:oracle:retail_service_backbone:15.0.4.0
Oracle » Retail Service Backbone » Version: 16.0.3.0

cpe:2.3:a:oracle:retail_service_backbone:16.0.3.0
Oracle » Retail Service Backbone » Version: 19.0.1.0

cpe:2.3:a:oracle:retail_service_backbone:19.0.1.0
Oracle » Retail Store Inventory Management » Version: 14.1

cpe:2.3:a:oracle:retail_store_inventory_management:14.1
Oracle » Retail Store Inventory Management » Version: 15.0

cpe:2.3:a:oracle:retail_store_inventory_management:15.0
Oracle » Retail Store Inventory Management » Version: 16.0

cpe:2.3:a:oracle:retail_store_inventory_management:16.0
Oracle » Retail Xstore Point Of Service » Version: 16.0.6

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6
Oracle » Retail Xstore Point Of Service » Version: 17.0.4

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4
Oracle » Retail Xstore Point Of Service » Version: 18.0.3

cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3
Oracle » Retail Xstore Point Of Service » Version: 19.0.2

cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2
Oracle » Retail Xstore Point Of Service » Version: 20.0.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1
Oracle » Timesten In-Memory Database » Version: N/A

cpe:2.3:a:oracle:timesten_in-memory_database:-
Oracle » Utilities Framework » Version: 4.2.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.2.0.2.0
Oracle » Utilities Framework » Version: 4.2.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0
Oracle » Utilities Framework » Version: 4.3.0.1.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.1.0
Oracle » Utilities Framework » Version: 4.3.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.2.0
Oracle » Utilities Framework » Version: 4.3.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.3.0
Oracle » Utilities Framework » Version: 4.3.0.4

cpe:2.3:a:oracle:utilities_framework:4.3.0.4
Oracle » Utilities Framework » Version: 4.3.0.4.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.4.0
Oracle » Utilities Framework » Version: 4.3.0.5.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.5.0
Oracle » Utilities Framework » Version: 4.3.0.6.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.6.0
Oracle » Utilities Framework » Version: 4.4.0.0.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0
Oracle » Utilities Framework » Version: 4.4.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0
Oracle » Utilities Framework » Version: 4.4.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0
Oracle » Utilities Testing Accelerator » Version: 6.0.0.1.1

cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-36374

Products

Pricing

Contact Us