Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2021-3537

MEDIUM · 5.9 CVSS Gepubliceerd: CWE-476

Beschrijving

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

Vendors

Xmlsoft Redhat Debian Fedoraproject Netapp Oracle

Affected products

Libxml2 Jboss Core Services Enterprise Linux Debian Linux Fedora Active Iq Unified Manager Clustered Data Ontap Clustered Data Ontap Antivirus Connector Manageability Software Development Kit Ontap Select Deploy Administration Utility Snapdrive Hci H410c Firmware Hci H410c Communications Cloud Native Core Network Function Cloud Native Environment Enterprise Manager Base Platform Enterprise Manager Ops Center Mysql Workbench Openjdk Peoplesoft Enterprise Peopletools Real User Experience Insight

References