CVE-2021-21704 Multiple vulnerabilities in Firebird client extension
A malicious Firebird database server can trigger memory corruption and denial of service in PHP applications using the Firebird PDO driver.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-21704?
CVE-2021-21704 is a medium-severity memory corruption vulnerability in Netapp Clustered Data Ontap, published on 4 Oct 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.
Which versions are affected by CVE-2021-21704?
3 open source packages ship an affected version, including libphp, php and php-min. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
libphp Bitnami | From 7.3.0 | 7.3.29, 7.4.21, 8.0.8 |
php Bitnami | From 7.3.0 | 7.3.29, 7.4.21, 8.0.8 |
php-min Bitnami | From 7.3.0 | 7.3.29, 7.4.21, 8.0.8 |
Linux distribution packages (16)
php7 SUSE:Enterprise Storage 6 | All versions | 7.2.5-4.79.1 |
php7 SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | All versions | 7.2.5-4.79.1 |
php7 SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | All versions | 7.2.5-4.79.1 |
php7 SUSE:Linux Enterprise High Performance Computing 15-ESPOS | All versions | 7.2.5-4.79.1 |
php7 SUSE:Linux Enterprise High Performance Computing 15-LTSS | All versions | 7.2.5-4.79.1 |
php72 SUSE:Linux Enterprise Module for Web and Scripting 12 | All versions | 7.2.5-1.66.1 |
php7 SUSE:Linux Enterprise Server 15 SP1-BCL | All versions | 7.2.5-4.79.1 |
php7 SUSE:Linux Enterprise Server 15 SP1-LTSS | All versions | 7.2.5-4.79.1 |
php7 SUSE:Linux Enterprise Server 15-LTSS | All versions | 7.2.5-4.79.1 |
php7 SUSE:Linux Enterprise Server for SAP Applications 15 | All versions | 7.2.5-4.79.1 |
php7 SUSE:Linux Enterprise Server for SAP Applications 15 SP1 | All versions | 7.2.5-4.79.1 |
php72 SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 7.2.5-1.66.1 |
php7 SUSE:Manager Proxy 4.0 | All versions | 7.2.5-4.79.1 |
php7 SUSE:Manager Retail Branch Server 4.0 | All versions | 7.2.5-4.79.1 |
php7 SUSE:Manager Server 4.0 | All versions | 7.2.5-4.79.1 |
php7 openSUSE:Leap 15.3 | All versions | 7.2.5-4.79.1 |
Products include Netapp Clustered Data Ontap, Php Php.
How do I fix CVE-2021-21704?
Upgrade libphp to a fixed version for your release line: 7.3.29, 7.4.21 or 8.0.8.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-21704 being exploited?
There is no known exploitation of CVE-2021-21704 in the wild and no public exploit code.
Other vulnerabilities in Netapp Clustered Data Ontap
Sources
Also known as BIT-libphp-2021-21704, BIT-php-2021-21704, BIT-php-min-2021-21704, DEBIAN-CVE-2021-21704, ECHO-fa97-935d-c387, GHSA-q773-v75g-5rqg and 4 more.