When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 06:12
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.openwall.com/lists/oss-security/2021/07/13/2 - Mailing List, Third Party Advisory | |
References | () https://commons.apache.org/proper/commons-compress/security-reports.html - Vendor Advisory | |
References | () https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b%40%3Cdev.poi.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040%40%3Cnotifications.skywalking.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae%40%3Cnotifications.skywalking.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71%40%3Ccommits.pulsar.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c%40%3Cnotifications.skywalking.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee%40%3Cnotifications.skywalking.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a%40%3Cnotifications.skywalking.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e%40%3Cnotifications.skywalking.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/rf5b1016fb15b7118b9a5e16bb0b78cb4f1dfcf7821eb137ab5757c91%40%3Cannounce.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/rf68442d67eb166f4b6cf0bbbe6c7f99098c12954f37332073c9822ca%40%3Cuser.commons.apache.org%3E - Mailing List, Vendor Advisory | |
References | () https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742%40%3Cnotifications.skywalking.apache.org%3E - | |
References | () https://security.netapp.com/advisory/ntap-20211022-0001/ - Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujan2022.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujul2022.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpuoct2021.html - Patch, Third Party Advisory |
07 Nov 2023, 03:36
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-07-13 08:15
Updated : 2024-11-21 06:12
NVD link : CVE-2021-35516
Mitre link : CVE-2021-35516
CVE.ORG link : CVE-2021-35516
JSON object : View
Products Affected
oracle
- communications_cloud_native_core_unified_data_repository
- healthcare_data_repository
- banking_party_management
- peoplesoft_enterprise_peopletools
- insurance_policy_administration
- financial_services_crime_and_compliance_management_studio
- financial_services_enterprise_case_management
- primavera_unifier
- communications_session_route_manager
- communications_billing_and_revenue_management
- commerce_guided_search
- communications_diameter_intelligence_hub
- communications_cloud_native_core_service_communication_proxy
- communications_messaging_server
- utilities_testing_accelerator
- communications_cloud_native_core_automated_test_suite
- banking_digital_experience
- banking_enterprise_default_management
- business_process_management_suite
- flexcube_universal_banking
- webcenter_portal
netapp
- oncommand_insight
- active_iq_unified_manager
apache
- commons_compress