CVE-2021-3541

CVE-2021-3541 describes an exponential entity expansion vulnerability in libxml2, affecting products from vendors like NetApp, Oracle, Red Hat, and xmlsoft. This flaw allows for a denial-of-service attack by bypassing existing protection mechanisms. With a CVSS score of 6.5 (Medium), it can be exploited remotely with low attack complexity, requiring low privileges to achieve high availability impact. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Despite this, the vulnerability has garnered significant community discussion and media coverage, indicating awareness within the cybersecurity landscape.