p PatchFirst

CVE-2021-42521

CVE-2021-42521

This page contains facts from public vulnerability sources. Check the original advisory before updating.

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer dereference may crash the application.

CVSS 8.7 · High · EPSS 1.3% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • vtk

    Versions
    • VTK - 9.0.0 and before: Affected

    No fix published

  • vtk9 Debian:12

    Versions
    • 9.1.0+really9.1.0+dfsg2-5
    • 9.1.0+really9.1.0+dfsg2-5+deb12u1
    • 9.1.0+really9.1.0+dfsg2-6
    • 9.1.0+really9.1.0+dfsg2-7
    • 9.1.0+really9.1.0+dfsg2-7.1
    • 9.1.0+really9.1.0+dfsg2-8
    • 9.2.6+dfsg1-1+exp1
    • 9.2.6+dfsg1-1+exp2
    • 9.3.0+dfsg1-1
    • 9.3.0+dfsg1-1.1
    • 9.3.0+dfsg1-1~exp1
    • 9.3.0+dfsg1-1~exp2
    • 9.3.0+dfsg1-1~exp3
    • 9.3.0+dfsg1-1~exp4
    • 9.3.0+dfsg1-2
    • 9.3.0+dfsg1-3
    • 9.3.0+dfsg1-3+hurd.1
    • 9.3.0+dfsg1-4
    • 9.3.0+dfsg1-4+m68k
    • 9.3.0+dfsg1-4.1+hurd.1
    • 9.3.0+dfsg1-5
    • 9.3.0+dfsg1-6
    • 9.3.0+dfsg1-7
    • 9.5.2+dfsg1-1~exp1
    • 9.5.2+dfsg2-1
    • 9.5.2+dfsg2-1~exp1
    • 9.5.2+dfsg2-1~exp2
    • 9.5.2+dfsg2-1~exp3
    • 9.5.2+dfsg2-1~exp4
    • 9.5.2+dfsg2-2
    • 9.5.2+dfsg2-3
    • 9.5.2+dfsg2-4
    • 9.5.2+dfsg3-1
    • 9.5.2+dfsg3-2
    • 9.5.2+dfsg3-3
    • 9.5.2+dfsg3-4
    • 9.5.2+dfsg3-5
    • 9.5.2+dfsg3-6
    • 9.5.2+dfsg3-7
    • 9.5.2+dfsg3-8
    • 9.5.2+dfsg4-1
    • 9.5.2+dfsg4-2
    • 9.5.2+dfsg4-3
    • 9.5.2+dfsg4-4
    • 9.5.2+dfsg4-5
    • 9.6.2+dfsg1-1exp1
    • 9.6.2+dfsg1-1exp2
    • 9.6.2+dfsg1-1exp3
    • 9.6.2+dfsg1-1exp4
    • 9.6.2+dfsg1-1exp5
    • 9.6.2+dfsg1-2
    • 9.6.2+dfsg1-3
    • 9.6.2+dfsg1-4
    • 9.6.2+dfsg1-5
    • 9.6.2+dfsg1-6
    • 9.6.2+ds-1
    • 9.6.2+ds-2
    • 9.6.2+ds-2+test
    • 9.6.2+ds-2+test1
    • 9.6.2+ds-3
    • 9.6.2+ds-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk9 Debian:13

    Affected ranges
    • ECOSYSTEM: < 9.1.0+really9.1.0+dfsg2-8

    Update to 9.1.0+really9.1.0+dfsg2-8

  • vtk9 Debian:14

    Affected ranges
    • ECOSYSTEM: < 9.1.0+really9.1.0+dfsg2-8

    Update to 9.1.0+really9.1.0+dfsg2-8

  • vtk PyPI

    Versions
    • 8.1.0
    • 8.1.1
    • 8.1.2
    • 9.0.0
    Affected ranges
    • ECOSYSTEM: < 9.0.1

    Update to 9.0.1

  • vtk Ubuntu:Pro:14.04:LTS

    Versions
    • 5.8.0-14ubuntu1
    • 5.8.0-14ubuntu3
    • 5.8.0-14.1ubuntu2
    • 5.8.0-14.1ubuntu3
    • 5.8.0-14.1ubuntu3+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk6 Ubuntu:14.04:LTS

    Versions
    • 6.0.0-1
    • 6.0.0-2
    • 6.0.0-3
    • 6.0.0-4
    • 6.0.0-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk Ubuntu:Pro:16.04:LTS

    Versions
    • 5.10.1+dfsg-2
    • 5.10.1+dfsg-2build3
    • 5.10.1+dfsg-2.1build1
    • 5.10.1+dfsg-2.1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk6 Ubuntu:Pro:16.04:LTS

    Versions
    • 6.2.0+dfsg1-4ubuntu5
    • 6.2.0+dfsg1-4ubuntu6
    • 6.2.0+dfsg1-8
    • 6.2.0+dfsg1-9
    • 6.2.0+dfsg1-10build1
    • 6.2.0+dfsg1-10ubuntu0.1
    • 6.2.0+dfsg1-10ubuntu0.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk6 Ubuntu:18.04:LTS

    Versions
    • 6.3.0+dfsg1-10build1
    • 6.3.0+dfsg1-10build2
    • 6.3.0+dfsg1-10build3
    • 6.3.0+dfsg1-11
    • 6.3.0+dfsg1-11build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk7 Ubuntu:18.04:LTS

    Versions
    • 7.1.1+dfsg1-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk6 Ubuntu:20.04:LTS

    Versions
    • 6.3.0+dfsg2-2build7
    • 6.3.0+dfsg2-4build1
    • 6.3.0+dfsg2-5
    • 6.3.0+dfsg2-5build1
    • 6.3.0+dfsg2-5build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk7 Ubuntu:20.04:LTS

    Versions
    • 7.1.1+dfsg1-12build2
    • 7.1.1+dfsg2-1
    • 7.1.1+dfsg2-1build1
    • 7.1.1+dfsg2-1ubuntu3
    • 7.1.1+dfsg2-2ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk7 Ubuntu:22.04:LTS

    Versions
    • 7.1.1+dfsg2-10
    • 7.1.1+dfsg2-10ubuntu2
    • 7.1.1+dfsg2-10ubuntu3
    • 7.1.1+dfsg2-10.1
    • 7.1.1+dfsg2-10.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk9 Ubuntu:22.04:LTS

    Versions
    • 9.0.1+dfsg1-8
    • 9.1.0+really9.0.3+dfsg1-4
    • 9.1.0+really9.0.3+dfsg1-4build1
    • 9.1.0+really9.1.0+dfsg2-3
    • 9.1.0+really9.1.0+dfsg2-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk9 Ubuntu:24.04:LTS

    Versions
    • 9.1.0+really9.1.0+dfsg2-7
    • 9.1.0+really9.1.0+dfsg2-7build1
    • 9.1.0+really9.1.0+dfsg2-7.1build2
    • 9.1.0+really9.1.0+dfsg2-7.1build3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →