glances: The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse...
CVE-2021-23418 is fixed in glances on 1 platform, first by glances 2.11.1-3ubuntu0.1~esm1, released July 29, 2021. It is not reported as exploited. Patch Radar priority: Routine.
The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| glances · Ubuntu 18.04.6 LTS (bionic) | 2.11.1-3ubuntu0.1~esm1 | glances 2.11.1-3ubuntu0.1~esm1 | Jul 29, 2021 |
| glances · Ubuntu 20.04 LTS (focal) | 3.1.3-1ubuntu0.1~esm1 | glances 3.1.3-1ubuntu0.1~esm1 | Jul 29, 2021 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.