When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2021-07-13 08:15
Updated : 2024-11-21 06:12
NVD link : CVE-2021-35517
Mitre link : CVE-2021-35517
CVE.ORG link : CVE-2021-35517
JSON object : View
Products Affected
oracle
- insurance_policy_administration
- communications_diameter_intelligence_hub
- banking_party_management
- healthcare_data_repository
- flexcube_universal_banking
- primavera_unifier
- communications_billing_and_revenue_management
- banking_treasury_management
- communications_messaging_server
- webcenter_portal
- commerce_guided_search
- banking_trade_finance
- banking_payments
- banking_apis
- communications_session_route_manager
- financial_services_enterprise_case_management
- banking_digital_experience
- business_process_management_suite
- communications_cloud_native_core_unified_data_repository
- banking_enterprise_default_management
- peoplesoft_enterprise_peopletools
- financial_services_crime_and_compliance_management_studio
- utilities_testing_accelerator
- communications_cloud_native_core_service_communication_proxy
apache
- commons_compress
netapp
- active_iq_unified_manager
- oncommand_insight