Vulnerability CVE-2021-3541: Information

Description

A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2021-3541
Published: July 9, 2021
Modified: March 1, 2022
Error type identifier: CWE-776

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
gem-nokogirisisyphus1.12.4-alt11.16.4-alt1ALT-PU-2021-2997-1252865Fixed
gem-nokogirisisyphus_e2k1.16.2-alt11.16.4-alt1ALT-PU-2024-6690-1-Fixed
gem-nokogirip101.13.8-alt1.11.13.8-alt1.1ALT-PU-2023-4266-4307833Fixed
gem-nokogirip10_e2k1.13.8-alt1.11.13.8-alt1.1ALT-PU-2024-7099-1-Fixed
gem-nokogiric10f11.13.8-alt1.11.11.1-alt1ALT-PU-2024-7812-2334397Testing
gem-nokogirip111.12.4-alt11.16.4-alt1ALT-PU-2021-2997-1252865Fixed
libxml2sisyphus2.9.12-alt12.12.7-alt1ALT-PU-2021-2057-1275606Fixed
libxml2p102.9.12-alt12.9.12-alt1.p10.1ALT-PU-2021-2057-1275606Fixed
libxml2c10f12.9.12-alt12.9.12-alt1.p10.1ALT-PU-2021-2057-1275606Fixed
libxml2c9f22.9.12-alt12.9.12-alt1.c9f2.1ALT-PU-2021-3332-1287715Fixed
libxml2p112.9.12-alt12.12.7-alt1ALT-PU-2021-2057-1275606Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1950515
  • Issue Tracking
  • Patch
  • Third Party Advisory
https://security.netapp.com/advisory/ntap-20210805-0007/
  • Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html
  • Patch
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*
      End excliding
      2.9.11

      Configuration 2

      cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*

      Configuration 3

      cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

      Configuration 4

      cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
      cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*
      cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
      cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
      cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*
      cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*
      cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
      cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*

      Configuration 5

      cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

      Configuration 6

      cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

      Configuration 7

      cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

      Configuration 8

      cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

      Configuration 9

      cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*

      Configuration 10

      cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*

      Configuration 11

      cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*

      Configuration 12

      cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top