Orta CVSS 6.5
CVE-2021-3541: Libxml2: güvenlik açığı
Açıklama (NVD)
A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.
Özet bilgiler
- Ürün
- Xmlsoft Libxml2
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %2,07 (yüzdelik 81)
- CWE
- CWE-776
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| xmlsoft-libxml2 | — | — | 2.9.11 |
| redhat-jboss-core-services | — | — | — |
| oracle-zfs-storage-appliance-kit | 8.8 | 8.8 | — |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-cloud-backup | — | — | — |
| netapp-clustered-data-ontap | — | — | — |
| netapp-clustered-data-ontap-antivirus-connector | — | — | — |
| netapp-manageability-software-development-kit | — | — | — |
| netapp-ontap-select-deploy-administration-utility | — | — | — |
| netapp-smi-s-provider | — | — | — |
| netapp-snapdrive | — | — | — |
| netapp-h410c-firmware | — | — | — |
| netapp-h300s-firmware | — | — | — |
| netapp-h500s-firmware | — | — | — |
| netapp-h700s-firmware | — | — | — |
| netapp-h300e-firmware | — | — | — |
| netapp-h500e-firmware | — | — | — |
| netapp-h700e-firmware | — | — | — |
| netapp-h410s-firmware | — | — | — |