CVE:CVE-2021-35517
CNNVD:CNNVD-202107-898
Apache Commons Compress是美国阿帕奇（Apache）基金会的一个用于处理压缩文件的库。
Apache Commons Compress存在安全漏洞，该漏洞源于当读取特殊设计的TAR归档文件时，Compress可以分配大量内存，从而导致小输入出现内存不足错误。
solution:Upgrade apache commons_compress to a higher version than 1.20,and avoid the version [1.1,1.20]; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade oracle banking_apis to a higher version than 18.3,19.1,19.2,20.1,21.1,and avoid the version [18.1,18.3],19.1,19.2,20.1,21.1; Upgrade oracle banking_digital_experience to a higher version than 18.3,19.1,19.2,20.1,21.1,and avoid the version [18.1,18.3],19.1,19.2,20.1,21.1; Upgrade oracle banking_enterprise_default_management to a higher version than 2.7.0,and avoid the version 2.7.0; Upgrade oracle banking_party_management to a higher version than 2.7.0,and avoid the version 2.7.0; Upgrade oracle banking_payments to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle banking_trade_finance to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle banking_treasury_management to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle business_process_management_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_billing_and_revenue_management to a higher version than 12.0.0.4,and avoid the version 12.0.0.4; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_diameter_intelligence_hub to a higher version than 8.2.3,and avoid the version [8.0.0,8.2.3]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.5,and avoid the version [8.0.0,8.2.5]; Upgrade oracle financial_services_crime_and_compliance_management_studio to a higher version than 8.0.8.2.0,8.0.8.3.0,and avoid the version 8.0.8.2.0,8.0.8.3.0; Upgrade oracle financial_services_enterprise_case_management to a higher version than 8.0.7.2.0,8.0.8.1.0,and avoid the version 8.0.7.2.0,8.0.8.1.0; Upgrade oracle flexcube_universal_banking to a higher version than 14.3.0,12.4,14.5,and avoid the version [14.0.0,14.3.0],12.4,14.5; Upgrade oracle healthcare_data_repository to a higher version than 8.1.0,and avoid the version 8.1.0; Upgrade oracle insurance_policy_administration to a higher version than 11.0.2,11.1.0,11.2.8,11.3.0,11.3.1,and avoid the version 11.0.2,11.1.0,11.2.8,11.3.0,11.3.1; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.57,8.58,8.59,and avoid the version 8.57,8.58,8.59; Upgrade oracle primavera_unifier to a higher version than 17.12,18.8,19.12,20.12,and avoid the version [17.7,17.12],18.8,19.12,20.12; Upgrade oracle utilities_testing_accelerator to a higher version than 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1,and avoid the version 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1
solution:Upgrade fisco-bcos fisco-bcos to a higher version than 2.7.2,and avoid the version 2.7.2