Unrated
CVE-2021-37136
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
Announced Group revision 1
Original source ↗CVE-2021-37136
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2021-37136
Netty
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "The Netty project",
"product": "Netty",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "4.1.68Final",
"versionType": "custom"
}
]
}
]- Related CVEs
- CVE-2021-37136
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #16019 · Revision 1
- Added to Heist Feed
- Publisher date