7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.012 Low
EPSS
Percentile
85.2%
Severity: Medium
Date : 2021-02-06
CVE-ID : CVE-2021-21702
Package : php7
Type : denial of service
Remote : Yes
Link : https://security.archlinux.org/AVG-1532
The package php7 before version 7.4.15-1 is vulnerable to denial of
service.
Upgrade to 7.4.15-1.
The problem has been fixed upstream in version 7.4.15.
None.
A security issue was found in PHP before versions 8.0.2, 7.4.15 and
7.3.27. PHP will crash with a SIGSEGV via null-pointer dereference
whenever an XML is provided to the SoapClient query() function without
an existing field. The issue is fixed in versions 8.0.2, 7.4.15 and
7.3.27.
A remote attacker might be able to crash PHP via a specially crafted
XML payload.
https://bugs.php.net/bug.php?id=80672
https://git.php.net/?p=php-src.git;a=commitdiff;h=f733ee195462201b2cbd1d17df2f752ee88771ba
https://git.php.net/?p=php-src.git;a=commitdiff;h=91655b45ea0a81f2d3003a7e6604e5f419d84df4
https://git.php.net/?p=php-src.git;a=commitdiff;h=3c939e3f69955d087e0bb671868f7267dfb2a502
https://security.archlinux.org/CVE-2021-21702
bugs.php.net/bug.php?id=80672
git.php.net/?p=php-src.git;a=commitdiff;h=3c939e3f69955d087e0bb671868f7267dfb2a502
git.php.net/?p=php-src.git;a=commitdiff;h=91655b45ea0a81f2d3003a7e6604e5f419d84df4
git.php.net/?p=php-src.git;a=commitdiff;h=f733ee195462201b2cbd1d17df2f752ee88771ba
security.archlinux.org/AVG-1532
security.archlinux.org/CVE-2021-21702
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.012 Low
EPSS
Percentile
85.2%