CVE-2021-36090

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.

• apache commons compress (>= 1.0 < 1.21) • oracle banking apis (>= 18.1 <= 18.3) • oracle banking apis 19.1 • oracle banking apis 19.2 • oracle banking apis 20.1 • oracle banking apis 21.1 • oracle banking digital experience (>= 18.1 <= 18.3) • oracle banking digital experience 19.1 • oracle banking digital experience 19.2 • oracle banking digital experience 20.1 • oracle banking digital experience 21.1 • oracle banking enterprise default management 2.7.0 • oracle banking party management 2.7.0 • oracle banking payments 14.5 • oracle banking platform 2.6.2 • oracle banking platform 2.7.1 • oracle banking platform 2.9.0 • oracle banking platform 2.12.0 • oracle banking trade finance 14.5 • oracle banking treasury management 14.5 • oracle business process management suite 12.2.1.3.0 • oracle business process management suite 12.2.1.4.0 • oracle commerce guided search 11.3.2 • oracle communications billing and revenue management 12.0.0.4 • oracle communications cloud native core automated test suite 1.8.0 • oracle communications cloud native core service communication proxy 1.14.0 • oracle communications cloud native core unified data repository 1.14.0 • oracle communications diameter intelligence hub (>= 8.0.0 <= 8.2.3) • oracle communications diameter intelligence hub 8.2.3 • oracle communications element manager (>= 8.2.0 <= 8.2.4.0) • oracle communications session report manager (>= 8.2.0 <= 8.2.5.0) • oracle communications session route manager (>= 8.0.0 <= 8.2.5.0) • oracle communications unified inventory management 7.4.0 • oracle communications unified inventory management 7.4.1 • oracle communications unified inventory management 7.4.2 • oracle communications unified inventory management 7.5.0 • oracle financial services analytical applications infrastructure (>= 8.0.6 <= 8.1.1) • oracle financial services crime and compliance management studio 8.0.8.2.0 • oracle financial services crime and compliance management studio 8.0.8.3.0 • oracle financial services enterprise case management • oracle financial services enterprise case management 8.0.7.2.0 • oracle financial services enterprise case management 8.0.8.1.0 • oracle flexcube universal banking (>= 14.0.0 <= 14.3.0) • oracle flexcube universal banking 12.4 • oracle flexcube universal banking 14.5 • oracle healthcare data repository 8.1.0 • oracle insurance policy administration 11.0.2 • oracle insurance policy administration 11.1.0 • oracle insurance policy administration 11.2.8 • oracle insurance policy administration 11.3.0 • oracle insurance policy administration 11.3.1 • oracle peoplesoft enterprise peopletools 8.57 • oracle peoplesoft enterprise peopletools 8.58 • oracle peoplesoft enterprise peopletools 8.59 • oracle primavera gateway (>= 17.12.0 <= 17.12.11) • oracle primavera gateway (>= 18.8.0 <= 18.8.12) • oracle primavera gateway (>= 19.12.0 <= 19.12.11) • oracle primavera gateway (>= 20.12.0 <= 20.12.7) • oracle primavera unifier (>= 17.7 <= 17.12) • oracle primavera unifier 18.8 … and 10 more