Vulnerabilities > CVE-2021-36090

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

apache

oracle

netapp

NVD

Published: 2021-07-13

Updated: 2024-11-21

Summary

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache Commons Compress 1.0 Apache Commons Compress 1.1 Apache Commons Compress 1.2 Apache Commons Compress 1.3 Apache Commons Compress 1.4 Apache Commons Compress 1.4.1 Apache Commons Compress 1.5 Apache Commons Compress 1.6 Apache Commons Compress 1.7 Apache Commons Compress 1.8 Apache Commons Compress 1.8.1 Apache Commons Compress 1.9 Apache Commons Compress 1.10 Apache Commons Compress 1.11 Apache Commons Compress 1.12 Apache Commons Compress 1.13 Apache Commons Compress 1.14 Apache Commons Compress 1.15 Apache Commons Compress 1.16 Apache Commons Compress 1.16.1 Apache Commons Compress 1.17 Apache Commons Compress 1.18 Apache Commons Compress 1.19 Apache Commons Compress 1.20	24
Application	Oracle Oracle Webcenter Portal 12.2.1.3.0 Oracle Webcenter Portal 12.2.1.4.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.9.0 Oracle Banking Platform 2.12.0 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 17.7 Oracle Primavera Unifier 17.8 Oracle Primavera Unifier 17.9 Oracle Primavera Unifier 17.10 Oracle Primavera Unifier 17.11 Oracle Primavera Unifier 17.12 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Communications Unified Inventory Management 7.4.0 Oracle Communications Unified Inventory Management 7.4.1 Oracle Communications Unified Inventory Management 7.4.2 Oracle Communications Unified Inventory Management 7.5.0 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Banking Digital Experience 21.1 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Flexcube Universal Banking 14.0.0 Oracle Flexcube Universal Banking 14.1.0 Oracle Flexcube Universal Banking 14.2.0 Oracle Flexcube Universal Banking 14.3.0 Oracle Flexcube Universal Banking 14.5 Oracle Flexcube Universal Banking 12.4 Oracle Commerce Guided Search 11.3.2 Oracle Insurance Policy Administration 11.3.0 Oracle Insurance Policy Administration 11.0.2 Oracle Insurance Policy Administration 11.1.0 Oracle Insurance Policy Administration 11.3.1 Oracle Insurance Policy Administration 11.2.8 Oracle Primavera Gateway 17.12.0 Oracle Primavera Gateway 17.12.6 Oracle Primavera Gateway 17.12.7 Oracle Primavera Gateway 17.12.8 Oracle Primavera Gateway 17.12.9 Oracle Primavera Gateway 17.12.10 Oracle Primavera Gateway 17.12.11 Oracle Primavera Gateway 20.12.0 Oracle Primavera Gateway 20.12.7 Oracle Primavera Gateway 19.12.0 Oracle Primavera Gateway 19.12.4 Oracle Primavera Gateway 19.12.10 Oracle Primavera Gateway 19.12.11 Oracle Primavera Gateway 18.8.0 Oracle Primavera Gateway 18.8.8 Oracle Primavera Gateway 18.8.8.1 Oracle Primavera Gateway 18.8.9 Oracle Primavera Gateway 18.8.11 Oracle Primavera Gateway 18.8.12 Oracle Financial Services Enterprise Case Management 8.0.8.1.0 Oracle Financial Services Enterprise Case Management * Oracle Financial Services Enterprise Case Management 8.0.7.2.0 Oracle Communications Element Manager 8.2.0 Oracle Communications Element Manager 8.2.0.0 Oracle Communications Element Manager 8.2.1 Oracle Communications Element Manager 8.2.2 Oracle Communications Element Manager 8.2.2.1 Oracle Communications Element Manager 8.2.4.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.0.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.0.1 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.3.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.4.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.7 Oracle Financial Services Analytical Applications Infrastructure 8.0.7.0.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.7.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.7.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.8 Oracle Financial Services Analytical Applications Infrastructure 8.0.8.0.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.9 Oracle Financial Services Analytical Applications Infrastructure 8.0.9.0.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.0.0.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1 Oracle Communications Session Route Manager 8.0.0 Oracle Communications Session Route Manager 8.1.0 Oracle Communications Session Route Manager 8.1.1 Oracle Communications Session Route Manager 8.2.0 Oracle Communications Session Route Manager 8.2.0.0 Oracle Communications Session Route Manager 8.2.1 Oracle Communications Session Route Manager 8.2.2 Oracle Communications Session Route Manager 8.2.2.1 Oracle Communications Session Route Manager 8.2.4 Oracle Communications Session Route Manager 8.2.4.0 Oracle Communications Session Route Manager 8.2.5 Oracle Communications Session Report Manager 8.2.0 Oracle Communications Session Report Manager 8.2.1 Oracle Communications Session Report Manager 8.2.2 Oracle Communications Session Report Manager 8.2.2.1 Oracle Communications Session Report Manager 8.2.4.0 Oracle Communications Session Report Manager 8.2.5.0 Oracle Healthcare Data Repository 8.1.0 Oracle Banking Party Management 2.7.0 Oracle Utilities Testing Accelerator 6.0.0.2.2 Oracle Utilities Testing Accelerator 6.0.0.3.1 Oracle Utilities Testing Accelerator 6.0.0.1.1 Oracle Banking Apis 18.1 Oracle Banking Apis 18.2 Oracle Banking Apis 18.3 Oracle Banking Apis 19.1 Oracle Banking Apis 19.2 Oracle Banking Apis 20.1 Oracle Banking Apis 21.1 Oracle Communications Cloud Native Core Unified Data Repository 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Cloud Native Core Automated Test Suite 1.8.0 Oracle Communications Billing AND Revenue Management 12.0.0.4 Oracle Banking Enterprise Default Management 2.7.0 Oracle Banking Payments 14.5 Oracle Banking Trade Finance 14.5 Oracle Banking Treasury Management 14.5 Oracle Communications Diameter Intelligence HUB 8.0.0 Oracle Communications Diameter Intelligence HUB 8.1.0 Oracle Communications Diameter Intelligence HUB 8.2.0 Oracle Communications Diameter Intelligence HUB 8.2.3 Oracle Financial Services Crime AND Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime AND Compliance Management Studio 8.0.8.3.0	132
Application	Netapp Netapp Oncommand Insight - Netapp Active IQ Unified Manager -	4
OS	Oracle Oracle Communications Messaging Server 8.1	1

Vulnerabilities > CVE-2021-36090 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2021-36090"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2021-36090