İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Orta CVSS 5.9

CVE-2021-3537: Libxml2: NULL işaretçi başvurusu

Yayın: · Güncelleme:

Açıklama (NVD)

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

Özet bilgiler

Ürün
Xmlsoft Libxml2
CVSS v3.1
5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
%3,60 (yüzdelik 90)
CWE
CWE-476
Yama
Mevcut

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
xmlsoft-libxml2——2.9.11
redhat-jboss-core-services———
redhat-enterprise-linux6.06.0—
redhat-enterprise-linux7.07.0—
redhat-enterprise-linux8.08.0—
debian-debian-linux9.09.0—
fedoraproject-fedora3333—
fedoraproject-fedora3434—
netapp-active-iq-unified-manager———
netapp-clustered-data-ontap———
netapp-clustered-data-ontap-antivirus-connector———
netapp-manageability-software-development-kit———
netapp-ontap-select-deploy-administration-utility———
netapp-snapdrive———
netapp-hci-h410c-firmware———
oracle-communications-cloud-native-core-network-function-cloud-native-environment1.10.01.10.0—
oracle-enterprise-manager-base-platform13.4.0.013.4.0.0—
oracle-enterprise-manager-base-platform13.5.0.013.5.0.0—
oracle-enterprise-manager-ops-center12.4.0.012.4.0.0—
oracle-mysql-workbench—8.0.26—
oracle-openjdk88—
oracle-peoplesoft-enterprise-peopletools8.588.58—
oracle-real-user-experience-insight13.4.1.013.4.1.0—
oracle-real-user-experience-insight13.5.1.013.5.1.0—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları