CVE-2021-42859: High severity mini-xml vulnerability

Published May 26, 2022

Updated

DISPUTED A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release.

Affected Software

1 affected component

Mini-xml Project Mini-xml=3.2

Event History

May 26, 2022

CVE Published

via MITRE·11:02 AM

Data Sourced

via MITRE·11:02 AM

Description

Disputed

12:15 PM

Frequently Asked Questions

What is the severity of CVE-2021-42859?

CVE-2021-42859 has been classified as having a potential denial of service impact due to a memory leak issue.

How do I fix CVE-2021-42859?

To mitigate CVE-2021-42859, upgrade Mini-XML to the latest version, or apply patches if available.

What versions are affected by CVE-2021-42859?

CVE-2021-42859 specifically affects Mini-XML version 3.2.

Is CVE-2021-42859 consistently reproducible?

Testing reports on CVE-2021-42859 are inconsistent, with varying results in reproduction across different setups.

What impact can CVE-2021-42859 have on system stability?

CVE-2021-42859 could lead to a denial of service due to a memory leak that affects system performance.