CVE-2021-3537

Description

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

Affected (24)

Products: Xmlsoft: Libxml2 · Redhat: Enterprise Linux, Jboss Core Services · Debian: Debian Linux · +3 more

Show all products

1 product

2 products

1 product

1 product

7 products

Active Iq Unified Manager

Clustered Data Ontap

Clustered Data Ontap Antivirus Connector

Manageability Software Development Kit

Ontap Select Deploy Administration Utility

Snapdrive

Hci H410c Firmware

Oracle

7 products

Communications Cloud Native Core Network Function Cloud Native Environment

Enterprise Manager Base Platform

Enterprise Manager Ops Center

Mysql Workbench

Openjdk

Peoplesoft Enterprise Peopletools

Real User Experience Insight

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxml2	Before 2.9.11

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Jboss Core Services	All versions

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 33
Fedoraproject Fedora	Version 34

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Clustered Data Ontap	All versions
Netapp Clustered Data Ontap Antivirus Connector	All versions
Netapp Manageability Software Development Kit	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Snapdrive	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Hci H410c Firmware	All versions

Running on/with	Platform Versions
Netapp Hci H410c	All versions

Configuration G

9 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Cloud Native Core Network Function Cloud Native Environment	Version 1.10.0
Oracle Enterprise Manager Base Platform	Version 13.4.0.0
Oracle Enterprise Manager Base Platform	Version 13.5.0.0
Oracle Enterprise Manager Ops Center	Version 12.4.0.0
Oracle Mysql Workbench	Up to 8.0.26
Oracle Openjdk	Version 8 update301
Oracle Peoplesoft Enterprise Peopletools	Version 8.58
Oracle Real User Experience Insight	Version 13.4.1.0
Oracle Real User Experience Insight	Version 13.5.1.0