CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected...

Apache Ant 安全漏洞

Apache Ant is the United States Apache Apache Foundation's set of automation tools for Java software development . The tool is mainly used for software compilation, testing and deployment and so on. A resource management error vulnerability exists in Apache Ant, which stems from the application...

Apache Ant Resource Management Error Vulnerability (CNVD-2021-51427)

Apache Ant is the United States Apache Apache Foundation's set of automation tools for Java software development . The tool is mainly used for software compilation, testing and deployment and so on. Apache Ant suffers from a resource management error vulnerability that stems from the application...

PT-2021-3617

Name of the Vulnerable Software and Affected Versions Apache Ant versions prior to 1.9.16 Apache Ant versions prior to 1.10.11 Description The issue is related to an uncontrolled resource consumption in Apache Ant. It can be exploited by a remote attacker to cause a denial of service. When Apache...

Apache Ant 安全漏洞

Apache Ant is the United States Apache Apache Foundation's set of automation tools for Java software development . The tool is mainly used for software compilation, testing and deployment and so on. Apache Ant suffers from a resource management error vulnerability that stems from the application...

CVE-2021-36373: Improper Handling of Length Parameter Inconsistency

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected...

PT-2021-3616

Name of the Vulnerable Software and Affected Versions Apache Ant versions prior to 1.9.16 Apache Ant versions prior to 1.10.11 Description The issue is related to an uncontrolled resource consumption in the Apache Ant utility. It can be exploited by a remote attacker to cause a denial of service...

Apache Ant Resource Management Error Vulnerability

Apache Ant is the United States Apache Apache Foundation's set of automation tools for Java software development . The tool is mainly used for software compilation, testing and deployment and so on. A resource management error vulnerability exists in Apache Ant, which stems from the application...

CVE-2021-36374: Improper Handling of Length Parameter Inconsistency

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

Advisory ROSA-SA-2021-1805

Software: ant 1.9.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-1945 CVE-Crit: MEDIUM CVE-DESC: Apache Ant 1.1 through 1.9.14 and 1.10.0 through 1.10.7 uses the default temporary directory defined by the Java system property java.io.tmpdir for several tasks, and thus may leak sensitive information. The fixcr...

Important Photon OS Security Update - PHSA-2021-4.0-0036

Updates of 'apache-ant' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0036

Updates of 'apache-ant' packages of Photon OS have been released...

Security Bulletin: Apache Ant Vulnerabilities Affect IBM Control Center (CVE-2020-1945, CVE-2020-11979)

Summary Apache Ant could allow a remote attacker to bypass security restrictions. Vulnerability Details CVEID: CVE-2020-1945 DESCRIPTION: Apache Ant could allow a remote attacker to bypass security restrictions, caused by the use of an insecure temporary directory to store source files. By sendin...

Security Bulletin: Vulnerability in Apache Ant affect IBM Operations Analytics - Log Analysis Analysis (CVE-2020-1945)

Summary A vulnerability in Apache Ant which could potentially leak sensitive information was addressed by IBM Operations Analytics - Log Analysis. Vulnerability Details CVEID: CVE-2020-1945 DESCRIPTION: Apache Ant could allow a remote attacker to bypass security restrictions, caused by the use of...

Updated ant packages fix security vulnerability

Updated ant packages fix security vulnerability: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one withou...

MGASA-2021-0173 Updated ant packages fix security vulnerability

Updated ant packages fix security vulnerability: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one withou...

Security Bulletin: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them

Summary As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. This primarily affects the usage of the agent's bundled ANTHOME libraries. Vulnerability Details CVEID: CVE-2020-11979...

Moderate Photon OS Security Update - PHSA-2021-0374

Updates of 'ntp' packages of Photon OS have been released...

USN-4874-1 ant vulnerability

It was discovered that Apache Ant created temporary files with insecure permissions. An attacker could use this vulnerability to read sensitive information leaked into /tmp, or potentially inject malicious code into a project that is built with Apache Ant...

USN-4874-1: Apache Ant vulnerability

It was discovered that Apache Ant created temporary files with insecure permissions. An attacker could use this vulnerability to read sensitive information leaked into /tmp, or potentially inject malicious code into a project that is built with Apache Ant...