Home

CVE-2021-3537

Description

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

Risk Information

Base Score
5.9
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.111

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-3517,CVE-2021-3518,CVE-2021-3537 are fixed in Ruby-nokogiri 1.11.4Windows
Multiple vulnerabilities are affected in Oracle HTTP Server 12.2.1.3.0Windows
Multiple vulnerabilities are affected in Oracle HTTP Server 12.2.1.4.0Windows
Multiple Vulnerabilities are affected in IBM Aspera Shares 1.10.1Windows
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-2-2.9.4-46.43.1.x86_64.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-2-32bit-2.9.4-46.43.1.x86_64.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-2-debuginfo-2.9.4-46.43.1.x86_64.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-2-debuginfo-32bit-2.9.4-46.43.1.x86_64.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-debugsource-2.9.4-46.43.1.x86_64.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-doc-2.9.4-46.43.1.noarch.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-tools-2.9.4-46.43.1.x86_64.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-tools-debuginfo-2.9.4-46.43.1.x86_64.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) python-libxml2-2.9.4-46.43.1.x86_64.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) python-libxml2-debuginfo-2.9.4-46.43.1.x86_64.rpmLinux
SUSE-SU-2021:1658-1(SUSE Linux Enterprise Server 12-SP5 ) python-libxml2-debugsource-2.9.4-46.43.1.x86_64.rpmLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-6.3ubuntu0.1_i386.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-6.3ubuntu0.1_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.4+dfsg1-6.1ubuntu1.4_i386.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.4+dfsg1-6.1ubuntu1.4_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-5ubuntu0.20.04.1_i386.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-5ubuntu0.20.04.1_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-5ubuntu0.20.10.2_i386.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-5ubuntu0.20.10.2_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-6.3ubuntu0.1_i386.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-6.3ubuntu0.1_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.4+dfsg1-6.1ubuntu1.4_i386.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.4+dfsg1-6.1ubuntu1.4_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.1_i386.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.1_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-5ubuntu0.20.10.2_i386.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-5ubuntu0.20.10.2_amd64.debLinux
Libxml2 update (ELSA-2021-2569) libxml2-2.9.7-9.0.1.el8_4.2.i686.rpmLinux
Libxml2 update (ELSA-2021-2569) libxml2-2.9.7-9.0.1.el8_4.2.x86_64.rpmLinux
Libxml2-devel update (ELSA-2021-2569) libxml2-devel-2.9.7-9.0.1.el8_4.2.i686.rpmLinux
Libxml2-devel update (ELSA-2021-2569) libxml2-devel-2.9.7-9.0.1.el8_4.2.x86_64.rpmLinux
Python3-libxml2 update (ELSA-2021-2569) python3-libxml2-2.9.7-9.0.1.el8_4.2.x86_64.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-2.9.7-9.el8_4.2.i686.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-2.9.7-9.el8_4.2.x86_64.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-debugsource-2.9.7-9.el8_4.2.i686.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-debugsource-2.9.7-9.el8_4.2.x86_64.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-devel-2.9.7-9.el8_4.2.i686.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-devel-2.9.7-9.el8_4.2.x86_64.rpmLinux
(RHSA-2021:2569) libxml2 security update python3-libxml2-2.9.7-9.el8_4.2.x86_64.rpmLinux
Libxml2 update (ELSA-2022-0899) libxml2-2.9.7-12.el8_5.i686.rpmLinux
Libxml2 update (ELSA-2022-0899) libxml2-2.9.7-12.el8_5.x86_64.rpmLinux
Libxml2-devel update (ELSA-2022-0899) libxml2-devel-2.9.7-12.el8_5.i686.rpmLinux
Libxml2-devel update (ELSA-2022-0899) libxml2-devel-2.9.7-12.el8_5.x86_64.rpmLinux
Python3-libxml2 update (ELSA-2022-0899) python3-libxml2-2.9.7-12.el8_5.x86_64.rpmLinux
Vulnerabilities CVE-2021-3517,CVE-2021-3518,CVE-2021-3537 are fixed in Ruby-nokogiri for Linux 1.11.4Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234