CVE-2021-21704

Katalog CVE

CVSS 5.9 · Medium EPSS 1,8%

Kerentanan Out-of-bounds Read pada php, netapp clustered data ontap. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.

Rincian

Terbit di NVD

4 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read
CWE-190: Integer Overflow or Wraparound
CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.php.net/bug.php?id=76448 exploit · issue tracking · patch · advisory vendor
• https://bugs.php.net/bug.php?id=76449 exploit · issue tracking · patch · advisory vendor
• https://bugs.php.net/bug.php?id=76450 exploit · issue tracking · patch · advisory vendor
• https://bugs.php.net/bug.php?id=76452 exploit · issue tracking · patch · advisory vendor
• https://security.gentoo.org/glsa/202209-20 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20211029-0006/ advisory pihak ketiga