CVE-2021-37136
HIGH
7.5
CVSS Severity Score
Vulnerability Description
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
Affected Platforms (CPE)
📦
Netty
Netty
< 4.1.68📦
Quarkus
Quarkus
< 2.2.4📦
Oracle
Banking Apis
>= 18.1 and <= 18.3📦
Oracle
Banking Apis
= 19.1📦
Oracle
Banking Apis
= 19.2📦
Oracle
Banking Apis
= 20.1📦
Oracle
Banking Apis
= 21.1📦
Oracle
Banking Digital Experience
= 18.1📦
Oracle
Banking Digital Experience
= 18.2📦
Oracle
Banking Digital Experience
= 18.3📦
Oracle
Banking Digital Experience
= 19.1📦
Oracle
Banking Digital Experience
= 19.2📦
Oracle
Banking Digital Experience
= 20.1📦
Oracle
Banking Digital Experience
= 21.1📦
Oracle
Coherence
= 12.2.1.4.0📦
Oracle
Coherence
= 14.1.1.0.0📦
Oracle
Commerce Guided Search
= 11.3.2📦
Oracle
Communications Brm Elastic Charging Engine
< 12.0.0.4.6📦
Oracle
Communications Brm Elastic Charging Engine
= 12📦
Oracle
Communications Cloud Native Core Binding Support Function
= 1.10.0📦
Oracle
Communications Cloud Native Core Binding Support Function
= 1.11.0📦
Oracle
Communications Cloud Native Core Network Slice Selection Function
= 1.8.0📦
Oracle
Communications Cloud Native Core Policy
= 1.15.0📦
Oracle
Communications Cloud Native Core Security Edge Protection Proxy
= 1.7.0📦
Oracle
Communications Cloud Native Core Unified Data Repository
= 1.15.0📦
Oracle
Communications Diameter Signaling Router
>= 8.0.0.0 and <= 8.5.0.2📦
Oracle
Communications Instant Messaging Server
= 8.1📦
Oracle
Helidon
= 1.4.10📦
Oracle
Helidon
= 2.4.0📦
Oracle
Peoplesoft Enterprise Peopletools
= 8.48📦
Oracle
Peoplesoft Enterprise Peopletools
= 8.57📦
Oracle
Peoplesoft Enterprise Peopletools
= 8.58📦
Oracle
Peoplesoft Enterprise Peopletools
= 8.59📦
Oracle
Webcenter Portal
= 12.2.1.3.0📦
Oracle
Webcenter Portal
= 12.2.1.4.0📦
Netapp
Oncommand Insight
All versions💻
Debian
Debian Linux
= 10.0💻
Debian