CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs...
7.5 HighFix available
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
1.26%Up 0.8 points since Apr 27, 2021
What each source reports
NVD Score used
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
- Record
CVE-2021-31598- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
- Record
CVE-2021-31598- Updated
- 2026-11-02
EUVDEUVD-2021-18491 No score
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
- Record
EUVD-2021-18491- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-79rj-564v-63cr
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs...
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
- Record
GHSA-79rj-564v-63cr- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-91, CWE-787
- Updated
- 2026-11-02
OSV
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
- Record
CVE-2021-31598- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
- Record
DEBIAN-CVE-2021-31598- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 12 moreShow less
OSVUBUNTU-CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
- Record
UBUNTU-CVE-2021-31598- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0580 No score
Updated netcdf packages fix security vulnerability
Multiple security issues found in ezXML, bundled in netcdf
- Record
MGASA-2021-0580- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:1505-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
This update was imported from the SUSE:SLE-15-SP2:Update update project.
- Record
openSUSE-SU-2021:1505-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3804-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
openSUSE-SU-2021:3804-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3805-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
openSUSE-SU-2021:3805-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3815-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
openSUSE-SU-2021:3815-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3873-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
openSUSE-SU-2021:3873-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3804-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
SUSE-SU-2021:3804-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3805-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
SUSE-SU-2021:3805-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3815-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
SUSE-SU-2021:3815-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3873-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
SUSE-SU-2021:3873-1- Updated
- 2026-11-02
OSVUSN-5061-1 No score
scilab vulnerabilities
It was discovered that Scilab did not properly sanitize XML inputs. An atacker could use a crafted XML file to cause a denial of service or possibly execute arbitrary code.
- Record
USN-5061-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mapcacheDebian:12 |
All versions, plus listed versions 1.14.0-11.14.0-21.14.0-2.1~exp11.14.0-31.14.0-3~exp1 Show 8 moreShow less1.14.0-3~exp21.14.0-41.14.1-11.14.1-1~bpo12+11.14.1-21.14.1-31.16.0-11.16.0-1~bpo13+1 |
None known |
mapcacheDebian:13 |
All versions, plus listed versions 1.14.1-31.16.0-11.16.0-1~bpo13+1 |
None known |
mapcacheDebian:14 |
All versions, plus listed versions 1.14.1-31.16.0-11.16.0-1~bpo13+1 |
None known |
netcdfDebian:12 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdfDebian:13 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdfDebian:14 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdf-parallelDebian:12 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdf-parallelDebian:13 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdf-parallelDebian:14 |
before 1:4.9.0-1 | 1:4.9.0-1 |
scilabDebian:12 |
All versions, plus listed versions 2024.0.0+dfsg-12024.0.0+dfsg-22024.0.0+dfsg-32024.0.0+dfsg-42024.0.0+dfsg-5 Show 19 moreShow less2024.0.0+dfsg-62024.1.0+dfsg-12024.1.0+dfsg-22024.1.0+dfsg-32024.1.0+dfsg-42024.1.0+dfsg-52024.1.0+dfsg-62024.1.0+dfsg-72024.1.0+dfsg-82024.1.0+dfsg1-12024.1.0+dfsg1-22024.1.0+dfsg1-32024.1.0+dfsg1-46.1.1+dfsg2-106.1.1+dfsg2-66.1.1+dfsg2-76.1.1+dfsg2-7~exp06.1.1+dfsg2-86.1.1+dfsg2-9 |
None known |
Show 86 moreShow less
| Package | Affected | Fixed |
|---|---|---|
scilabDebian:13 |
All versions, plus listed versions 2024.1.0+dfsg-62024.1.0+dfsg-6+deb13u12024.1.0+dfsg-72024.1.0+dfsg-82024.1.0+dfsg1-12024.1.0+dfsg1-22024.1.0+dfsg1-32024.1.0+dfsg1-4 |
None known |
scilabDebian:14 |
before 2024.1.0+dfsg1-1, plus listed versions 2024.1.0+dfsg-62024.1.0+dfsg-72024.1.0+dfsg-8 |
2024.1.0+dfsg1-1 |
scilabDebian:9 From an advisory covering 5 CVEs |
before 5.5.2-4+deb9u1, plus listed versions 5.5.2-4 |
5.5.2-4+deb9u1 |
netcdfMageia:8 From an advisory covering 16 CVEs |
before 4.7.4-3.1.mga8 | 4.7.4-3.1.mga8 |
netcdf_4_6_1-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-mpich-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-mvapich2-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-openmpi2-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-mpich-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-mvapich2-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-openmpi2-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_7_3-gnu-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-mpich-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-mvapich2-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-openmpi2-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-openmpi3-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_6_1-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mpich-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mvapich2-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-openmpi2-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mpich-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mvapich2-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-openmpi2-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_7_4-gnu-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mpich-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mvapich2-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi3-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi4-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mpich-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mvapich2-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi3-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi4-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
scilabUbuntu:Pro:16.04:LTS |
before 5.5.2-2ubuntu3+esm1, plus listed versions 5.5.2-1ubuntu15.5.2-2ubuntu15.5.2-2ubuntu25.5.2-2ubuntu3 |
5.5.2-2ubuntu3+esm1 |
mapcacheUbuntu:16.04:LTS |
All versions, plus listed versions 1.4.0-31.4.0-4 |
None known |
mapcacheUbuntu:18.04:LTS |
All versions, plus listed versions 1.6.0-21.6.1-1 |
None known |
scilabUbuntu:18.04:LTS |
All versions, plus listed versions 5.5.2-4ubuntu25.5.2-66.0.0-16.0.1-1ubuntu16.0.1-7ubuntu1~18.046.0.1-7ubuntu1~18.04.16.0.1-7ubuntu1~18.04.2 |
None known |
mapcacheUbuntu:20.04:LTS |
All versions, plus listed versions 1.8.0-11.8.0-1build21.10.0-1 |
None known |
netcdfUbuntu:20.04:LTS |
All versions, plus listed versions 1:4.6.2-1build11:4.7.3-1 |
None known |
netcdf-parallelUbuntu:20.04:LTS |
All versions, plus listed versions 1:4.6.2-1 |
None known |
scilabUbuntu:20.04:LTS |
All versions, plus listed versions 6.0.2-0ubuntu26.0.2-0ubuntu36.0.2-1fakesync56.1.0+dfsg1-1ubuntu36.1.0+dfsg1-1ubuntu3.1 |
None known |
mapcacheUbuntu:22.04:LTS |
All versions, plus listed versions 1.10.0-2build11.10.0-2build31.12.0-1 |
None known |
netcdfUbuntu:22.04:LTS |
All versions, plus listed versions 1:4.7.4-1build11:4.8.1-1 |
None known |
netcdf-parallelUbuntu:22.04:LTS |
All versions, plus listed versions 1:4.7.4-11:4.8.1-2 |
None known |
scilabUbuntu:22.04:LTS |
All versions, plus listed versions 6.1.0+dfsg1-76.1.1+dfsg2-3ubuntu1 |
None known |
mapcacheUbuntu:24.04:LTS |
All versions, plus listed versions 1.14.0-21.14.0-2build11.14.0-2build21.14.0-4build11.14.0-4build2 |
None known |
netcdf-parallelUbuntu:24.04:LTS |
All versions, plus listed versions 1:4.9.0-1ubuntu11:4.9.0-1ubuntu31:4.9.0-1ubuntu4 |
None known |
scilabUbuntu:24.04:LTS |
All versions, plus listed versions 6.1.1+dfsg2-96.1.1+dfsg2-9build16.1.1+dfsg2-102024.0.0+dfsg-52024.0.0+dfsg-5build22024.0.0+dfsg-5build3 |
None known |
mapcacheUbuntu:25.10 |
All versions, plus listed versions 1.14.1-1build11.14.1-3 |
None known |
netcdf-parallelUbuntu:25.10 |
All versions, plus listed versions 1:4.9.0-6build11:4.9.3-21:4.9.3-2build1 |
None known |
scilabUbuntu:25.10 |
All versions, plus listed versions 2024.1.0+dfsg-6build52024.1.0+dfsg-6ubuntu22024.1.0+dfsg-6ubuntu32024.1.0+dfsg-6ubuntu42024.1.0+dfsg-7ubuntu1 |
None known |
mapcacheUbuntu:26.10 |
All versions, plus listed versions 1.14.1-3build21.16.0-11.16.0-1build1 |
None known |
scilabUbuntu:26.10 |
All versions, plus listed versions 2024.1.0+dfsg1-22024.1.0+dfsg1-2build12024.1.0+dfsg1-32024.1.0+dfsg1-3build1 |
None known |
mapcacheUbuntu:26.04:LTS |
All versions, plus listed versions 1.14.1-31.14.1-3build11.14.1-3build2 |
None known |
netcdf-parallelUbuntu:26.04:LTS |
All versions, plus listed versions 1:4.9.3-2build11:4.9.3-2build2 |
None known |
scilabUbuntu:26.04:LTS |
All versions, plus listed versions 2024.1.0+dfsg-7ubuntu12024.1.0+dfsg-82024.1.0+dfsg-8build22024.1.0+dfsg-8build32024.1.0+dfsg-8build4 Show 4 moreShow less2024.1.0+dfsg-8build52024.1.0+dfsg1-12024.1.0+dfsg1-1ubuntu12024.1.0+dfsg1-2 |
None known |
scilabUbuntu:Pro:16.04:LTS From an advisory covering 4 CVEs |
before 5.5.2-2ubuntu3+esm1, plus listed versions 5.5.2-1ubuntu15.5.2-2ubuntu15.5.2-2ubuntu25.5.2-2ubuntu3 |
5.5.2-2ubuntu3+esm1 |
netcdf_4_7_3-gnu-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdf_4_7_3-gnu-mpich-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdf_4_7_3-gnu-mvapich2-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdf_4_7_3-gnu-openmpi2-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdf_4_7_3-gnu-openmpi3-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdfopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf-openmpiopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_7_3-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-mpich-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-mvapich2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-openmpi2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-openmpi3-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_6_1-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mpich-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mvapich2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-openmpi1-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-openmpi2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdfopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf-openmpi2openSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf-openmpi3openSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf-openmpi4openSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mpich-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mvapich2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi3-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi4-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-31598 is a high vulnerability (CVSS 7.5) in Ezxml Project Ezxml, published April 24, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. Fixed in netcdf 1:4.9.0-1.
References
sourceforge.net/p/ezxml/bugs/28
lists.debian.org/debian-lts-announce/2021/07/msg00005.html
nvd.nist.gov/vuln/detail/CVE-2021-31598
github.com/advisories/GHSA-79rj-564v-63cr
security-tracker.debian.org/tracker/CVE-2021-31598
advisories.mageia.org/MGASA-2021-0580.html
Show 35 moreShow less
bugs.mageia.org/show_bug.cgi?id=29241
debian.org/lts/security/2021/dla-2705
bugs.debian.org/cgi-bin/bugreport.cgi?bug=989360
lists.opensuse.org/archives/list/[email protected]/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U
suse.com/support/update/announcement/2021/suse-su-20213804-1
bugzilla.suse.com/1191856
ubuntu.com/security/CVE-2021-31598
cve.org/CVERecord?id=CVE-2021-31598