← Database

CVE-2021-35515

HIGH CVSS: 7.5 Published: 2021-07-13 Modified: 2026-06-17

Description

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.

Affected Platforms

Netapp Oncommand InsightOracle Communications Billing And Revenue ManagementOracle Banking Enterprise Default ManagementOracle Financial Services Crime And Compliance Management StudioOracle Communications Cloud Native Core Service Communication ProxyApache Commons CompressOracle Banking Treasury ManagementOracle Financial Services Enterprise Case ManagementOracle Insurance Policy AdministrationOracle Peoplesoft Enterprise Peopletools

Weakness Type

CWE-834, CWE-835

References