UpHeron
All vulnerabilities

Servers and applications

CVE-2021-3537

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

Severity
Medium 5.9
Published
14 May 2021
Last changed
14 Oct 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:openjdk
  • Version 8-update301

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-3537
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-3537