CVE-2021-37136

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack

• netty netty (< 4.1.68) • quarkus quarkus (< 2.2.4) • oracle banking apis (>= 18.1 <= 18.3) • oracle banking apis 19.1 • oracle banking apis 19.2 • oracle banking apis 20.1 • oracle banking apis 21.1 • oracle banking digital experience 18.1 • oracle banking digital experience 18.2 • oracle banking digital experience 18.3 • oracle banking digital experience 19.1 • oracle banking digital experience 19.2 • oracle banking digital experience 20.1 • oracle banking digital experience 21.1 • oracle coherence 12.2.1.4.0 • oracle coherence 14.1.1.0.0 • oracle commerce guided search 11.3.2 • oracle communications brm - elastic charging engine (< 12.0.0.4.6) • oracle communications brm - elastic charging engine 12 • oracle communications cloud native core binding support function 1.10.0 • oracle communications cloud native core binding support function 1.11.0 • oracle communications cloud native core network slice selection function 1.8.0 • oracle communications cloud native core policy 1.15.0 • oracle communications cloud native core security edge protection proxy 1.7.0 • oracle communications cloud native core unified data repository 1.15.0 • oracle communications diameter signaling router (>= 8.0.0.0 <= 8.5.0.2) • oracle communications instant messaging server 8.1 • oracle helidon 1.4.10 • oracle helidon 2.4.0 • oracle peoplesoft enterprise peopletools 8.48 • oracle peoplesoft enterprise peopletools 8.57 • oracle peoplesoft enterprise peopletools 8.58 • oracle peoplesoft enterprise peopletools 8.59 • oracle webcenter portal 12.2.1.3.0 • oracle webcenter portal 12.2.1.4.0 • netapp oncommand insight • debian debian linux 10.0 • debian debian linux 11.0