Search/CVE-2021-3537
● CVE — Medium

CVE-2021-3537

Vendordebian, oracle, fedoraproject, redhat, netappProductdebian linux, openjdk, fedora, enterprise linux, clustered data ontap, peoplesoft enterprise peopletools, active iq unified manager, enterprise manager ops center, libxml2, jboss core services, enterprise manager base platform, snapdrive, real user experience insight, mysql workbench, communications cloud native core network function cloud native environment, ontap select deploy administration utility, clustered data ontap antivirus connector, manageability software development kit, hci h410c firmwareDiscoveredMay 14, 2021UpdatedNov 21, 2024

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

CVSS v3.1
5.9 MEDIUM
EPSS
3.60%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
May 14, 2021
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024