EUVD-2021-1684

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Denial of service vulnerability in Compress due to large memory allocation from crafted 7Z archives.

Reporter	Title	Published	Views	Family All 89
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	31 Aug 202116:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for May 2024 - Multiple CVEs addressed	14 Jun 202409:53	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Commons Compress Denial of Service Vulnerability Affects IBM Sterling Control Center (CVE-2021-35516)	16 Nov 202119:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for June 2024 - Multiple CVEs addressed	7 Aug 202405:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Commons Compress affects IBM Process Mining . CVE-2021-35515, CVE-2021-35516 + CVE-2021-35517	5 May 202314:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java	8 Jul 202420:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Commons* affect Tivoli Netcool/OMNIbus WebGUI (CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090)	19 Sep 202123:41	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Commons as used by IBM Tivoli Network Manager is vulnerable to denial of service (CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090)	4 Jul 202212:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM protocol is affected by Denial of Service and Security Restriction Bypass	7 Jul 202513:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Apache, Golang Go, and Linux Kernel affect IBM Spectrum Copy Data Management	10 Dec 202123:51	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "a5f9ad53-4077-338c-978d-b0b11ac4f115",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8ddc469c-0bb0-3d62-8b55-1c6cf920da86",
        "product": {
          "name": "Apache Commons Compress"
        },
        "product_version": "1.6 <Apache Commons Compress*"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-35516
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/security-alerts/cpujul2022.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html
security	www.security.netapp.com/advisory/ntap-20211022-0001
lists	www.lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742@%3Cnotifications.skywalking.apache.org%3E
lists	www.lists.apache.org/thread.html/rf68442d67eb166f4b6cf0bbbe6c7f99098c12954f37332073c9822ca%40%3Cuser.commons.apache.org%3E
lists	www.lists.apache.org/thread.html/rf5b1016fb15b7118b9a5e16bb0b78cb4f1dfcf7821eb137ab5757c91@%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e@%3Cnotifications.skywalking.apache.org%3E

07 Oct 2025 00:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

CVSS 25

EPSS0.0174