Yüksek CVSS 7.5

CVE-2021-35517: Commons Compress: güvenlik açığı

Yayın: 13 Temmuz 2021 11:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.

Özet bilgiler

Ürün: Apache Commons Compress
CVSS v3.1: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: %10,61 (yüzdelik 96)
CWE: CWE-130
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
apache-commons-compress	1.1	1.20	—
netapp-active-iq-unified-manager	—	—	—
netapp-active-iq-unified-manager	—	—	—
netapp-active-iq-unified-manager	—	—	—
netapp-oncommand-insight	—	—	—
oracle-banking-apis	18.1	18.3	—
oracle-banking-apis	19.1	19.1	—
oracle-banking-apis	19.2	19.2	—
oracle-banking-apis	20.1	20.1	—
oracle-banking-apis	21.1	21.1	—
oracle-banking-digital-experience	18.1	18.3	—
oracle-banking-digital-experience	19.1	19.1	—
oracle-banking-digital-experience	19.2	19.2	—
oracle-banking-digital-experience	20.1	20.1	—
oracle-banking-digital-experience	21.1	21.1	—
oracle-banking-enterprise-default-management	2.7.0	2.7.0	—
oracle-banking-party-management	2.7.0	2.7.0	—
oracle-banking-payments	14.5	14.5	—
oracle-banking-trade-finance	14.5	14.5	—
oracle-banking-treasury-management	14.5	14.5	—
oracle-business-process-management-suite	12.2.1.3.0	12.2.1.3.0	—
oracle-business-process-management-suite	12.2.1.4.0	12.2.1.4.0	—
oracle-commerce-guided-search	11.3.2	11.3.2	—
oracle-communications-billing-and-revenue-management	12.0.0.4	12.0.0.4	—
oracle-communications-cloud-native-core-service-communication-proxy	1.14.0	1.14.0	—
oracle-communications-cloud-native-core-unified-data-repository	1.14.0	1.14.0	—
oracle-communications-diameter-intelligence-hub	8.0.0	8.2.3	—
oracle-communications-session-route-manager	8.0.0	8.2.5	—
oracle-financial-services-crime-and-compliance-management-studio	8.0.8.2.0	8.0.8.2.0	—
oracle-financial-services-crime-and-compliance-management-studio	8.0.8.3.0	8.0.8.3.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları