https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:38:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03752 bdu:2021-03752 https://cve.radiocsirt.org/vuln/bdu:2021-03752 https://cve.radiocsirt.org/vuln/bell-cve-2021-36373 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-36373 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0324 certfr-2024-avi-0324 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0324 https://cve.radiocsirt.org/vuln/cleanstart-2025-yd79563 <p><strong>Affected:</strong> CleanStart: apache-ant</p> <p>Security vulnerability affects the apache-ant package. When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs.</p> <p><strong>Affected:</strong> CleanStart: apache-ant</p> <p>Security vulnerability affects the apache-ant package. When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs.</p> https://cve.radiocsirt.org/vuln/cleanstart-2025-yd79563 https://cve.radiocsirt.org/vuln/cnvd-2021-51427 cnvd-2021-51427 https://cve.radiocsirt.org/vuln/cnvd-2021-51427 https://cve.radiocsirt.org/vuln/euvd-2026-29376 EUVD-2026-29376 https://cve.radiocsirt.org/vuln/euvd-2026-29376 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36373 <p>When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.</p> <p>When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-36373 https://cve.radiocsirt.org/vuln/ghsa-q5r4-cfpx-h6fh <p><strong>Affected:</strong> Maven: org.apache.ant:ant</p> <p>When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.</p> <p><strong>Affected:</strong> Maven: org.apache.ant:ant</p> <p>When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.</p> https://cve.radiocsirt.org/vuln/ghsa-q5r4-cfpx-h6fh https://cve.radiocsirt.org/vuln/gsd-2021-36373 gsd-2021-36373 https://cve.radiocsirt.org/vuln/gsd-2021-36373 https://cve.radiocsirt.org/vuln/msrc_cve-2021-36373 msrc_CVE-2021-36373 https://cve.radiocsirt.org/vuln/msrc_cve-2021-36373 https://cve.radiocsirt.org/vuln/oesa-2021-1277 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: ant, openEuler:20.03-LTS-SP2: ant</p> <p>Ant is a Java based build tool. In theory it is kind of like &#34;make&#34; without makes wrinkles and with the full portability of pure java code. Security Fix(es): When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.(CVE-2021-36373) When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.(CVE-2021-36374)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: ant, openEuler:20.03-LTS-SP2: ant</p> <p>Ant is a Java based build tool. In theory it is kind of like &#34;make&#34; without makes wrinkles and with the full portability of pure java code. Security Fix(es): When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.(CVE-2021-36373) When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.(CVE-2021-36374)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1277 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11688-1 <p>ant-1.10.12-1.1 on GA media</p> <p>ant-1.10.12-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11688-1 https://cve.radiocsirt.org/vuln/rhsa-2022:5903 <p>mysql-connector-java: unauthorized access to critical wildfly-elytron: possible timing attack in ScramServer wildfly-core: Invalid Sensitivity Classification of Vault Expression wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users protobuf-java: potential DoS in the parsing procedure for binary data ant: excessive memory allocation when reading a specially crafted TAR archive netty-codec: Bzip2Decoder doesn&#39;t allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn&#39;t restrict chunk length and may buffer skippable chunks in an unnecessary way jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck netty: control chars in header names may lead to HTTP request smuggling spring-expression: Denial of service via specially crafted SpEL expression com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson</p> <p>mysql-connector-java: unauthorized access to critical wildfly-elytron: possible timing attack in ScramServer wildfly-core: Invalid Sensitivity Classification of Vault Expression wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users protobuf-java: potential DoS in the parsing procedure for binary data ant: excessive memory allocation when reading a specially crafted TAR archive netty-codec: Bzip2Decoder doesn&#39;t allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn&#39;t restrict chunk length and may buffer skippable chunks in an unnecessary way jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck netty: control chars in header names may lead to HTTP request smuggling spring-expression: Denial of service via specially crafted SpEL expression com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5903 https://cve.radiocsirt.org/vuln/suse-su-2022:1417-1 <p>Security update for ant</p> <p>Security update for ant</p> https://cve.radiocsirt.org/vuln/suse-su-2022:1417-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-36373 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ant, Ubuntu:Pro:16.04:LTS: ant, Ubuntu:Pro:18.04:LTS: ant, Ubuntu:Pro:20.04:LTS: ant, Ubuntu:22.04:LTS: ant, Ubuntu:24.04:LTS: ant, Ubuntu:25.10: ant, Ubuntu:26.04:LTS: ant</p> <p>When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ant, Ubuntu:Pro:16.04:LTS: ant, Ubuntu:Pro:18.04:LTS: ant, Ubuntu:Pro:20.04:LTS: ant, Ubuntu:22.04:LTS: ant, Ubuntu:24.04:LTS: ant, Ubuntu:25.10: ant, Ubuntu:26.04:LTS: ant</p> <p>When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-36373 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1738 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1738