Vendor/product archive

apache / ant CVEs

Beta · best-effort

4 CVEs tagged to apache / ant — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2021-36374

Published Jul 14, 2021

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-36373

Published Jul 14, 2021

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small input…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-11979

Published Oct 1, 2020

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2020-1945

Published May 14, 2020

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensit…

CVSS 6.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1