Apache Ant up to 1.9.15/1.10.10 TAR Archive length parameter

Summaryinfo

A vulnerability classified as critical was found in Apache Ant up to 1.9.15/1.10.10. This vulnerability affects unknown code of the component TAR Archive Handler. The manipulation results in length parameter. This vulnerability was named CVE-2021-36373. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as critical has been found in Apache Ant up to 1.9.15/1.10.10. Affected is an unknown function of the component TAR Archive Handler. The manipulation with an unknown input leads to a length parameter vulnerability. CWE is classifying the issue as CWE-130. The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data. This is going to have an impact on availability. CVE summarizes:

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

The weakness was presented 01/27/2023 as ntap-20210819-0007. The advisory is available at security.netapp.com. This vulnerability is traded as CVE-2021-36373 since 07/12/2021. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. The technical details are unknown and an exploit is not available.

The vulnerability scanner Nessus provides a plugin with the ID 207878 (RHEL 9 : ant (Unpatched Vulnerability)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.9.16 or 1.10.11 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (207878). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Apache

Name

• Ant

Version

• 1.9.0
• 1.9.1
• 1.9.2
• 1.9.3
• 1.9.4
• 1.9.5
• 1.9.6
• 1.9.7
• 1.9.8
• 1.9.9
• 1.9.10
• 1.9.11
• 1.9.12
• 1.9.13
• 1.9.14
• 1.9.15
• 1.10.0
• 1.10.1
• 1.10.2
• 1.10.3
• 1.10.4
• 1.10.5
• 1.10.6
• 1.10.7
• 1.10.8
• 1.10.9
• 1.10.10

License

• open-source

Website

• Vendor: https://www.apache.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion