Fedora: Security Advisory for vtk (FEDORA-2023-2cf9dd7d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : vtk (2023-2cf9dd7d52)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-2cf9dd7d52 advisory. Add upstream patch for CVE-2021-42521 - vtkXMLTreeReader: possible nullptr dereference Tenable has extracted the preceding description block directly from th...

abinitostudio (>=1.0.1 <=1.0.8), aicsshparam (>=0.0.6 <=0.0.12) +6 more potentially affected by CVE-2021-42521 via vtk (>=8.1.2 <=9.0.0)

vtk PYPI version =8.1.2, =1.0.1, =0.0.6, =1.0.0.0, =0.1.262, =0.0.1.dev1, =0.17.0, =0.22.0 Source cves: CVE-2021-42521 Source advisory: OSV:GHSA-XFHG-9PJG-XG7G...

abinitostudio (>=1.0.1 <=1.0.8), aicsshparam (>=0.0.6 <=0.0.12) +6 more potentially affected by CVE-2021-42521 via vtk (>=8.1.2 <=9.0.0)

vtk PYPI version =8.1.2, =1.0.1, =0.0.6, =1.0.0.0, =0.1.262, =0.0.1.dev1, =0.17.0, =0.22.0 Source cves: CVE-2021-42521 Source advisory: OSV:PYSEC-2022-255...

CVE-2021-42521

VTK vulnerability CVE-2021-42521: a NULL pointer dereference in IO/Infovis/vtkXMLTreeReader.cxx due to the vendor not checking xmlDocGetRootElement’s return value. Affected: VTK before 9.2.5. Impact: possible crash of the application. Root cause: potential NULL dereference when parsing XML with l...