7.5
CVE-2021-35515
- EPSS 1.19%
- Veröffentlicht 13.07.2021 08:15:07
- Zuletzt bearbeitet 21.11.2024 06:12:25
- Quelle security@apache.org
- CVE-Watchlists
- Unerledigt
LoginApache Commons Compress 1.6 to 1.20 denial of service vulnerability
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Commons Compress Version >= 1.6 <= 1.20
Netapp ≫ Active Iq Unified Manager Version- SwPlatformlinux
Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere
Netapp ≫ Active Iq Unified Manager Version- SwPlatformwindows
Netapp ≫ Oncommand Insight Version-
Oracle ≫ Banking Digital Experience Version >= 18.1 <= 18.3
Oracle ≫ Banking Digital Experience Version19.1
Oracle ≫ Banking Digital Experience Version20.1
Oracle ≫ Banking Digital Experience Version21.1
Oracle ≫ Banking Enterprise Default Management Version2.7.0
Oracle ≫ Banking Party Management Version2.7.0
Oracle ≫ Banking Payments Version14.5
Oracle ≫ Banking Trade Finance Version14.5
Oracle ≫ Banking Treasury Management Version14.5
Oracle ≫ Business Process Management Suite Version12.2.1.3.0
Oracle ≫ Business Process Management Suite Version12.2.1.4.0
Oracle ≫ Commerce Guided Search Version11.3.2
Oracle ≫ Communications Billing And Revenue Management Version12.0.0.4
Oracle ≫ Communications Cloud Native Core Automated Test Suite Version1.8.0
Oracle ≫ Communications Cloud Native Core Service Communication Proxy Version1.14.0
Oracle ≫ Communications Cloud Native Core Unified Data Repository Version1.14.0
Oracle ≫ Communications Diameter Intelligence Hub Version >= 8.0.0 <= 8.2.3
Oracle ≫ Communications Session Route Manager Version >= 8.0.0 <= 8.2.5
Oracle ≫ Financial Services Crime And Compliance Management Studio Version8.0.8.2.0
Oracle ≫ Financial Services Crime And Compliance Management Studio Version8.0.8.3.0
Oracle ≫ Financial Services Enterprise Case Management Version8.0.7.2.0
Oracle ≫ Financial Services Enterprise Case Management Version8.0.8.1.0
Oracle ≫ Flexcube Universal Banking Version >= 14.0.0 <= 14.3.0
Oracle ≫ Flexcube Universal Banking Version12.4.0
Oracle ≫ Flexcube Universal Banking Version14.5.0
Oracle ≫ Healthcare Data Repository Version8.1.0
Oracle ≫ Insurance Policy Administration Version11.0.2
Oracle ≫ Insurance Policy Administration Version11.1.0
Oracle ≫ Insurance Policy Administration Version11.2.8
Oracle ≫ Insurance Policy Administration Version11.3.0
Oracle ≫ Insurance Policy Administration Version11.3.1
Oracle ≫ Peoplesoft Enterprise Peopletools Version8.57
Oracle ≫ Peoplesoft Enterprise Peopletools Version8.58
Oracle ≫ Peoplesoft Enterprise Peopletools Version8.59
Oracle ≫ Primavera Unifier Version >= 17.7 <= 17.12
Oracle ≫ Primavera Unifier Version18.8
Oracle ≫ Primavera Unifier Version19.12
Oracle ≫ Primavera Unifier Version20.12
Oracle ≫ Utilities Testing Accelerator Version6.0.0.1.1
Oracle ≫ Utilities Testing Accelerator Version6.0.0.2.2
Oracle ≫ Utilities Testing Accelerator Version6.0.0.3.1
Oracle ≫ Communications Messaging Server Version8.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.19% | 0.789 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-834 Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.