High severity · published Oct 19, 2021
CVE-2021-37136
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression)
7.5
CVSS
5.9%
EPSS
No
On KEV
Description
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netty · The Netty project
before 4.1.68Final · source: vendor, NVD
BA
Banking Apis · Oracle
18.1 through 18.3; 19.1; 19.2; 20.1; 21.1 · source: NVD
BD
Banking Digital Experience · Oracle
18.1; 18.2; 18.3; 19.1; 19.2; 20.1; +1 more · source: NVD
CO
Coherence · Oracle
12.2.1.4.0; 14.1.1.0.0 · source: NVD
CG
Commerce Guided Search · Oracle
11.3.2 · source: NVD
CB
Communications Brm - Elastic Charging Engine · Oracle
before 12.0.0.4.6; 12 · source: NVD
CC
Communications Cloud Native Core Binding Support Function · Oracle
1.10.0; 1.11.0 · source: NVD
CC
Communications Cloud Native Core Network Slice Selection Function · Oracle
1.8.0 · source: NVD
CC
Communications Cloud Native Core Policy · Oracle
1.15.0 · source: NVD
CC
Communications Cloud Native Core Security Edge Protection Proxy · Oracle
1.7.0 · source: NVD
CC
Communications Cloud Native Core Unified Data Repository · Oracle
1.15.0 · source: NVD
CD
Communications Diameter Signaling Router · Oracle
8.0.0.0 through 8.5.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-37136
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-37136
Third Party Advisory
https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv
lists.apache.org
https://lists.apache.org/thread.html/r06a145c9bd41a7344da242cef07977b24abe3349161ede948e30913d%40%3Ccommits.druid.apache.org%3E
lists.apache.org
https://lists.apache.org/thread.html/r5406eaf3b07577d233b9f07cfc8f26e28369e6bab5edfcab41f28abb%40%3Ccommits.druid.apache.org%3E
lists.apache.org
https://lists.apache.org/thread.html/r5e05eba32476c580412f9fbdfc9b8782d5b40558018ac4ac07192a04%40%3Ccommits.druid.apache.org%3E
lists.apache.org
https://lists.apache.org/thread.html/r75490c61c2cb7b6ae2c81238fd52ae13636c60435abcd732d41531a0%40%3Ccommits.druid.apache.org%3E
lists.apache.org
https://lists.apache.org/thread.html/rd262f59b1586a108e320e5c966feeafbb1b8cdc96965debc7cc10b16%40%3Ccommits.druid.apache.org%3E
More from Netty
7.5
CVE-2021-37137
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage