Back to search
CVE-2021-3537
Published: May 14, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.
| Vendor | Product | Versions |
|---|---|---|
n/a | libxml2 | affected libxml2 2.9.11 |
Weaknesses (CWE)
References
FEDORA-2021-e3ed1ba38b
vendor-advisory
x_refsource_FEDORA
[debian-lts-announce] 20210510 [SECURITY] [DLA 2653-1] libxml2 security update
mailing-list
x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1956522
x_refsource_MISC
FEDORA-2021-b950000d2b
vendor-advisory
x_refsource_FEDORA
GLSA-202107-05
vendor-advisory
x_refsource_GENTOO
https://security.netapp.com/advisory/ntap-20210625-0002/
x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuoct2021.html
x_refsource_MISC
https://www.oracle.com/security-alerts/cpuapr2022.html
x_refsource_MISC
https://www.oracle.com/security-alerts/cpujul2022.html
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now