csirt@kutim:~/threat-intel/cve/CVE-2021-36373

Katalog CVE

CVSS 5.5 · Medium EPSS 2,5%

Kerentanan Improper Handling of Length Parameter Inconsistency pada apache ant, oracle agile product lifecycle management +26 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

Rincian

Terbit di NVD
14 Juli 2021
Terakhir diubah
25 Agustus 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-130: Improper Handling of Length Parameter Inconsistency
EPSS (30 hari)
2,5% peluang dieksploitasi; lebih tinggi dari 84,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
apache ant Versi 1.9.0 hingga sebelum 1.9.16
apache ant Versi 1.10.0 hingga sebelum 1.10.11
oracle agile product lifecycle management Versi 9.3.6
oracle banking trade finance Versi 14.5
oracle banking treasury management Versi 14.5
oracle communications cloud native core automated test suite Versi 1.9.0
oracle communications cloud native core binding support function Versi 1.11.0
oracle communications order and service management Versi 7.3
oracle communications order and service management Versi 7.4
oracle communications unified inventory management Versi 7.3.0
oracle communications unified inventory management Versi 7.4.0
oracle communications unified inventory management Versi 7.4.1
oracle communications unified inventory management Versi 7.4.2
oracle communications unified inventory management Versi 7.5.0
oracle enterprise repository Versi 11.1.1.7.0
oracle financial services analytical applications infrastructure Versi 8.0.6 hingga 8.1.1
oracle insurance policy administration Versi 11.0 hingga 11.3.1
oracle primavera gateway Versi 17.12.0 hingga 17.12.11
oracle primavera gateway Versi 18.8.0 hingga 18.8.12
oracle primavera gateway Versi 19.12.0 hingga 19.12.11
oracle primavera gateway Versi 20.12.0 hingga 20.12.7
oracle primavera unifier Versi 17.7 hingga 17.12
oracle primavera unifier Versi 18.8
oracle primavera unifier Versi 19.12
oracle primavera unifier Versi 20.12
oracle real-time decision server Versi 3.2.0.0
oracle real-time decision server Versi 11.1.1.9.0
oracle retail advanced inventory planning Versi 14.1
oracle retail advanced inventory planning Versi 15.0
oracle retail advanced inventory planning Versi 16.0
oracle retail back office Versi 14.0
oracle retail back office Versi 14.1
oracle retail bulk data integration Versi 16.0.3.0
oracle retail bulk data integration Versi 19.0.1
oracle retail central office Versi 14.0
oracle retail central office Versi 14.1
oracle retail eftlink Versi 19.0.1
oracle retail eftlink Versi 20.0.1
oracle retail extract transform and load Versi 13.2.8
oracle retail financial integration Versi 14.1.3.2
oracle retail financial integration Versi 15.0.4.0
oracle retail financial integration Versi 16.0.3.0
oracle retail integration bus Versi 14.1.3.2
oracle retail integration bus Versi 15.0.4.0
oracle retail integration bus Versi 16.0.3.0
oracle retail integration bus Versi 19.0.1.0
oracle retail invoice matching Versi 16.0.3
oracle retail merchandising system Versi 19.0.1
oracle retail point-of-service Versi 14.0
oracle retail point-of-service Versi 14.1
oracle retail predictive application server Versi 14.1.3
oracle retail predictive application server Versi 15.0.3
oracle retail predictive application server Versi 16.0.3.0
oracle retail service backbone Versi 14.1.3.2
oracle retail service backbone Versi 15.0.4.0
oracle retail service backbone Versi 16.0.3.0
oracle retail service backbone Versi 19.0.1.0
oracle retail store inventory management Versi 14.1
oracle retail store inventory management Versi 15.0
oracle retail store inventory management Versi 16.0

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 73 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.