CVE-2021-36374

Name of the Vulnerable Software and Affected Versions Apache Ant versions prior to 1.9.16 Apache Ant versions prior to 1.10.11

Description The issue is related to an uncontrolled resource consumption in Apache Ant. It can be exploited by a remote attacker to cause a denial of service. When Apache Ant reads a specially crafted ZIP archive or derived formats, it can allocate large amounts of memory, leading to an out of memory error, even with small inputs. This can disrupt builds using Apache Ant. Derived formats from ZIP archives, such as JAR files and many office files, are also affected.

Recommendations For Apache Ant versions prior to 1.9.16, update to version 1.9.16 or later. For Apache Ant versions prior to 1.10.11, update to version 1.10.11 or later.