Skip to content
Sign in
Not rated

CVE-2021-36373 When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that…

Description

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

Affected products and versions

Product Affected versions Fixed in
Apache Ant 1.10 earliest → 1.10.10 No fix stated
Apache Ant 1.9 earliest → 1.9.15 No fix stated

Other CVEs of Apache Ant

The 3 CVEs of Apache Ant →
CVE-2026-78254 The ftp and scp tasks of Apache Ant can download files from a remote server Not rated CVE-2021-36374 When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large… Not rated
Track this CVE