CVE-2021-23418

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-23418
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23418.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-23418
Aliases
Related
Published
2021-07-29T18:15:07Z
Modified
2025-03-09T05:48:18.808694Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.

References

Affected packages

Debian:12 / glances

Package

Name
glances
Purl
pkg:deb/debian/glances?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.2.3.1+dfsg-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / glances

Package

Name
glances
Purl
pkg:deb/debian/glances?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.2.3.1+dfsg-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/nicolargo/glances

Affected ranges

Type
GIT
Repo
https://github.com/nicolargo/glances
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4b87e979afdc06d98ed1b48da31e69eaa3a9fb94
Fixed
4b87e979afdc06d98ed1b48da31e69eaa3a9fb94
Fixed
85d5a6b4af31fcf785d5a61086cbbd166b40b07a
Fixed
85d5a6b4af31fcf785d5a61086cbbd166b40b07a
Fixed
9d6051be4a42f692392049fdbfc85d5dfa458b32
Fixed
9d6051be4a42f692392049fdbfc85d5dfa458b32

Affected versions

v1.*

v1.0
v1.1.2
v1.1.3
v1.2
v1.3
v1.3.1
v1.3.2
v1.3.3
v1.3.4
v1.3.5
v1.3.6
v1.3.7
v1.4
v1.4.1
v1.4.1.1
v1.4.2
v1.4.2.1
v1.5
v1.5.1
v1.5.2
v1.6
v1.6.1
v1.7
v1.7.1
v1.7.2
v1.7.3
v1.7.4
v1.7.5
v1.7.6
v1.7.7

v2.*

v2.0
v2.0.1
v2.1
v2.1.1
v2.1.2
v2.10
v2.11
v2.11.1
v2.2
v2.2.1
v2.3
v2.4
v2.4.1
v2.4.2
v2.5
v2.5.1
v2.6
v2.6.1
v2.6.2
v2.7
v2.7.1
v2.7.1_1
v2.7_RC1
v2.8
v2.8.1
v2.8.1_1
v2.8.2
v2.8.3
v2.8.4
v2.8.5
v2.8.6
v2.8.7
v2.8.8
v2.9.0
v2.9.1

v3.*

v3.0
v3.0.1
v3.0.2
v3.1.0
v3.1.1
v3.1.2
v3.1.3
v3.1.4
v3.1.4.1
v3.1.5
v3.1.6
v3.1.6.1
v3.1.6.2
v3.1.7