Lucene search

CVE-2021-21707

🗓️ 29 Nov 2021 07:06:15Reported by phpType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 1260 Views

PHP XML parsing functions vulnerability in versions 7.3.x, 7.4.x, and 8.0.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 107
ALT Linux	Security fix for the ALT Linux 9 package php7 version 7.3.33-alt1	29 Nov 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.0 version 8.0.13-alt1	1 Dec 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.2 version 8.0.13-alt1	20 Nov 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.1 version 8.0.13-alt1	20 Nov 202100:00	–	altlinux
Fedora	[SECURITY] Fedora 33 Update: php-7.4.26-1.fc33	25 Nov 202101:05	–	fedora
Fedora	[SECURITY] Fedora 34 Update: php-7.4.26-1.fc34	25 Nov 202100:59	–	fedora
Fedora	[SECURITY] Fedora 35 Update: php-8.0.13-1.fc35	26 Nov 202101:22	–	fedora
RedhatCVE	CVE-2021-21707	23 Nov 202117:18	–	redhatcve
OpenVAS	Huawei EulerOS: Security Advisory for php (EulerOS-SA-2022-1755)	25 May 202200:00	–	openvas
OpenVAS	Fedora: Security Advisory for php (FEDORA-2021-88ba46f2b2)	4 Dec 202100:00	–	openvas

Nvd

Node

php phpRange7.3.0–7.3.33

php phpRange7.4.0–7.4.26

php phpRange8.0.0–8.0.13

Node

netapp clustered_data_ontapMatch-

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

tenable tenable.scRange<5.21.0

[
  {
    "vendor": "PHP Group",
    "product": "PHP",
    "versions": [
      {
        "version": "7.3.x",
        "status": "affected",
        "lessThan": "7.3.33",
        "versionType": "custom"
      },
      {
        "version": "7.4.x",
        "status": "affected",
        "lessThan": "7.4.26",
        "versionType": "custom"
      },
      {
        "version": "8.0.X",
        "status": "affected",
        "lessThan": "8.0.13",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2022/dsa-5082
lists	www.lists.debian.org/debian-lts-announce/2022/12/msg00030.html
security	www.security.netapp.com/advisory/ntap-20211223-0005/
tenable	www.tenable.com/security/tns-2022-09
bugs	www.bugs.php.net/bug.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Nov 2021 07:15Current

6.9Medium risk

Vulners AI Score6.9

CVSS25

CVSS35.3

EPSS0.00638

CWE-159