Lucene search

K
nvd[email protected]NVD:CVE-2021-3537
HistoryMay 14, 2021 - 8:15 p.m.

CVE-2021-3537

2021-05-1420:15:16
CWE-476
web.nvd.nist.gov
1

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.014

Percentile

86.5%

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

Affected configurations

NVD
Node
xmlsoftlibxml2Range<2.9.11
Node
redhatjboss_core_servicesMatch-
OR
redhatenterprise_linuxMatch6.0
OR
redhatenterprise_linuxMatch7.0
OR
redhatenterprise_linuxMatch8.0
Node
debiandebian_linuxMatch9.0
Node
fedoraprojectfedoraMatch33
OR
fedoraprojectfedoraMatch34
Node
netappactive_iq_unified_managerMatch-vmware_vsphere
OR
netappclustered_data_ontapMatch-
OR
netappclustered_data_ontap_antivirus_connectorMatch-
OR
netappmanageability_software_development_kitMatch-
OR
netappontap_select_deploy_administration_utilityMatch-
OR
netappsnapdriveMatch-windows
Node
netapphci_h410c_firmwareMatch-
AND
netapphci_h410cMatch-
Node
oraclecommunications_cloud_native_core_network_function_cloud_native_environmentMatch1.10.0
OR
oracleenterprise_manager_base_platformMatch13.4.0.0
OR
oracleenterprise_manager_base_platformMatch13.5.0.0
OR
oracleenterprise_manager_ops_centerMatch12.4.0.0
OR
oraclemysql_workbenchRange8.0.26
OR
oracleopenjdkMatch8update301
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.58
OR
oraclereal_user_experience_insightMatch13.4.1.0
OR
oraclereal_user_experience_insightMatch13.5.1.0

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.014

Percentile

86.5%