Medium severity5.0NVD Advisory· Published Oct 4, 2021· Updated Jun 17, 2026

CVE-2021-21704

Description

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NetApp/Clustered Data Ontap
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
PHP/PHP3 versions
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: >=7.3.0,<7.3.29
- (no CPE)range: <7.3.29, <7.4.21, <8.0.8
- (no CPE)range: 7.3.x
osv-coords38 versions
pkg:bitnami/libphp pkg:bitnami/php pkg:bitnami/php-min pkg:rpm/opensuse/php7&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/php7&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/php7&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/php7-test&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/php7-test&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/php7&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/php7&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP2 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP3 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP2 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP3 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/php7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Proxy%204.0 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Server%204.0 pkg:rpm/suse/php7&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/php72&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/php72&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/php74&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/php74&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
>= 7.3.0, < 7.3.29+ 37 more
- (no CPE)range: >= 7.3.0, < 7.3.29
- (no CPE)range: >= 7.3.0, < 7.3.29
- (no CPE)range: >= 7.3.0, < 7.3.29
- (no CPE)range: < 7.4.6-lp152.2.18.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.4.6-lp152.2.18.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.4.6-3.22.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.4.6-3.22.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.2.34-150000.4.103.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.5-4.79.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.5-4.79.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.5-4.79.1
- (no CPE)range: < 7.4.33-150200.3.46.2
- (no CPE)range: < 7.2.5-1.66.1
- (no CPE)range: < 7.2.5-1.66.1
- (no CPE)range: < 7.4.6-1.24.1
- (no CPE)range: < 7.4.6-1.24.1

Patches

Vulnerability mechanics

References

bugs.php.net/bug.phpnvdExploitIssue TrackingPatchVendor Advisory
bugs.php.net/bug.phpnvdExploitIssue TrackingPatchVendor Advisory
bugs.php.net/bug.phpnvdExploitIssue TrackingPatchVendor Advisory
bugs.php.net/bug.phpnvdExploitIssue TrackingPatchVendor Advisory
security.gentoo.org/glsa/202209-20nvdThird Party Advisory
security.netapp.com/advisory/ntap-20211029-0006/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.325
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000