All errata/sisyphus/ALT-PU-2021-4988-1
ALT-PU-2021-4988-1

Package update ant in branch sisyphus

Version1.10.11-alt1_1jpp11
Task#283145
Published2021-08-17
Max severityHIGH
Severity:

Closed issues (6)

BDU:2021-03752
HIGH7.5

Уязвимость утилиты для автоматизации сборки Apache Ant, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю выполнить отказ в обслуживании

Published: 2021-07-22
CVSS 3.xHIGH 7.5
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0HIGH 7.8
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:C
References
BDU:2021-03753
HIGH7.5

Уязвимость утилиты для автоматизации сборки Apache Ant, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2021-07-22
CVSS 3.xHIGH 7.5
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0HIGH 7.8
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:C
References
CVE-2021-36373
MEDIUM5.5

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

Published: 2021-07-14Modified: 2024-11-21
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References
CVE-2021-36374
MEDIUM5.5

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

Published: 2021-07-14Modified: 2024-11-21
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References
GHSA-5v34-g2px-j4fw
MEDIUM5.5

Improper Handling of Length Parameter Inconsistency in Apache Ant

Published: 2021-08-02Modified: 2024-03-01
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References
GHSA-q5r4-cfpx-h6fh
MEDIUM5.5

Improper Handling of Length Parameter Inconsistency in Apache Ant

Published: 2021-08-02Modified: 2022-02-09
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References