CVE-2021-35515

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-35515
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-35515.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-35515
Aliases
Downstream
Related
Published
2021-07-13T08:15:07.033Z
Modified
2026-05-15T12:03:17.088106050Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:banking_digital_experience:21.1:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:banking_digital_experience",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "introduced": "18.1"
                },
                {
                    "last_affected": "18.3"
                },
                {
                    "last_affected": "19.1"
                },
                {
                    "last_affected": "20.1"
                },
                {
                    "last_affected": "21.1"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:banking_enterprise_default_management",
            "extracted_events": [
                {
                    "last_affected": "2.7.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:banking_party_management:2.7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:banking_party_management",
            "extracted_events": [
                {
                    "last_affected": "2.7.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:banking_payments:14.5:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:banking_payments",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "14.5"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:banking_trade_finance:14.5:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:banking_trade_finance",
            "extracted_events": [
                {
                    "last_affected": "14.5"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:banking_treasury_management:14.5:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:banking_treasury_management",
            "extracted_events": [
                {
                    "last_affected": "14.5"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:business_process_management_suite",
            "extracted_events": [
                {
                    "last_affected": "12.2.1.3.0"
                },
                {
                    "last_affected": "12.2.1.4.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:commerce_guided_search",
            "extracted_events": [
                {
                    "last_affected": "11.3.2"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:communications_billing_and_revenue_management",
            "extracted_events": [
                {
                    "last_affected": "12.0.0.4"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.8.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:communications_cloud_native_core_automated_test_suite",
            "extracted_events": [
                {
                    "last_affected": "1.8.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.14.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:communications_cloud_native_core_service_communication_proxy",
            "extracted_events": [
                {
                    "last_affected": "1.14.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.14.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:communications_cloud_native_core_unified_data_repository",
            "extracted_events": [
                {
                    "last_affected": "1.14.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:communications_diameter_intelligence_hub",
            "extracted_events": [
                {
                    "introduced": "8.0.0"
                },
                {
                    "last_affected": "8.2.3"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:o:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:communications_messaging_server",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "8.1"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:communications_session_route_manager",
            "extracted_events": [
                {
                    "introduced": "8.0.0"
                },
                {
                    "last_affected": "8.2.5"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:financial_services_crime_and_compliance_management_studio",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "8.0.8.2.0"
                },
                {
                    "last_affected": "8.0.8.3.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.7.2.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.8.1.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:financial_services_enterprise_case_management",
            "extracted_events": [
                {
                    "last_affected": "8.0.7.2.0"
                },
                {
                    "last_affected": "8.0.8.1.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:flexcube_universal_banking:12.4.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:flexcube_universal_banking:14.5.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:flexcube_universal_banking",
            "extracted_events": [
                {
                    "introduced": "14.0.0"
                },
                {
                    "last_affected": "14.3.0"
                },
                {
                    "last_affected": "12.4.0"
                },
                {
                    "last_affected": "14.5.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:healthcare_data_repository:8.1.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:healthcare_data_repository",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "8.1.0"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:insurance_policy_administration:11.1.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:insurance_policy_administration:11.2.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:insurance_policy_administration:11.3.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:insurance_policy_administration:11.3.1:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:insurance_policy_administration",
            "extracted_events": [
                {
                    "last_affected": "11.0.2"
                },
                {
                    "last_affected": "11.1.0"
                },
                {
                    "last_affected": "11.2.8"
                },
                {
                    "last_affected": "11.3.0"
                },
                {
                    "last_affected": "11.3.1"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:peoplesoft_enterprise_peopletools",
            "extracted_events": [
                {
                    "last_affected": "8.57"
                },
                {
                    "last_affected": "8.58"
                },
                {
                    "last_affected": "8.59"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:primavera_unifier",
            "extracted_events": [
                {
                    "introduced": "17.7"
                },
                {
                    "last_affected": "17.12"
                },
                {
                    "last_affected": "18.8"
                },
                {
                    "last_affected": "19.12"
                },
                {
                    "last_affected": "20.12"
                }
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.1.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.2.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.3.1:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:utilities_testing_accelerator",
            "extracted_events": [
                {
                    "last_affected": "6.0.0.1.1"
                },
                {
                    "last_affected": "6.0.0.2.2"
                },
                {
                    "last_affected": "6.0.0.3.1"
                }
            ]
        }
    ]
}
References

Affected packages