● CVE — Medium
CVE-2021-36373
Vendororacle, apacheProductcommunications order and service management, communications unified inventory management, agile product lifecycle management, primavera unifier, financial services analytical applications infrastructure, retail merchandising system, communications cloud native core automated test suite, primavera gateway, retail back office, retail central office, retail integration bus, retail point-of-service, agile plm, enterprise repository, insurance policy administration, retail advanced inventory planning, retail bulk data integration, retail financial integration, retail invoice matching, ant, communications cloud native core binding support function, banking treasury management, real-time decision server, retail eftlink, banking trade finance, retail extract transform and loadDiscoveredJul 14, 2021UpdatedAug 25, 2026
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.