← Database

CVE-2021-3537

MEDIUM CVSS: 5.9 Published: 2021-05-14 Modified: 2026-06-17

Description

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

Affected Platforms

Oracle Real User Experience InsightXmlsoft Libxml2Debian Debian LinuxNetapp Clustered Data OntapRedhat Jboss Core ServicesOracle Enterprise Manager Ops CenterNetapp Ontap Select Deploy Administration UtilityOracle Peoplesoft Enterprise PeopletoolsOracle Mysql WorkbenchRedhat Enterprise Linux

Weakness Type

CWE-476, CWE-476

References