Vulnerabilities > CVE-2021-36090

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
apache
oracle
netapp

Summary

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.

Vulnerable Configurations

Part Description Count
Application
Apache
24
Application
Oracle
132
Application
Netapp
4
OS
Oracle
1

References