CVE-2021-21704: Netapp Clustered Data Ontap

Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days.

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.

Affected products

• Netapp Clustered Data Ontap: affected versions not specified
• PHP PHP: from 7.3.0, before 7.3.29 (fixed in 7.3.29); from 7.4.0, before 7.4.21 (fixed in 7.4.21); from 8.0.0, before 8.0.8 (fixed in 8.0.8)

Published 2021-10-04. Last modified 2026-06-17.