CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40439

Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions of Apache OpenOffice up to 4.1.10 are subject to this issue. expat in version 4.1.11 is patched.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 62.7%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.3

References

Products affected by CVE-2021-40439

Apache » Openoffice » Version: N/A

cpe:2.3:a:apache:openoffice:-
Apache » Openoffice » Version: 1.0.2

cpe:2.3:a:apache:openoffice:1.0.2
Apache » Openoffice » Version: 1.0.3

cpe:2.3:a:apache:openoffice:1.0.3
Apache » Openoffice » Version: 1.1.0

cpe:2.3:a:apache:openoffice:1.1.0
Apache » Openoffice » Version: 1.1.4

cpe:2.3:a:apache:openoffice:1.1.4
Apache » Openoffice » Version: 1.1.5

cpe:2.3:a:apache:openoffice:1.1.5
Apache » Openoffice » Version: 2.0.0

cpe:2.3:a:apache:openoffice:2.0.0
Apache » Openoffice » Version: 2.0.1

cpe:2.3:a:apache:openoffice:2.0.1
Apache » Openoffice » Version: 2.0.2

cpe:2.3:a:apache:openoffice:2.0.2
Apache » Openoffice » Version: 2.0.3

cpe:2.3:a:apache:openoffice:2.0.3
Apache » Openoffice » Version: 2.0.4

cpe:2.3:a:apache:openoffice:2.0.4
Apache » Openoffice » Version: 2.1.0

cpe:2.3:a:apache:openoffice:2.1.0
Apache » Openoffice » Version: 2.2.0

cpe:2.3:a:apache:openoffice:2.2.0
Apache » Openoffice » Version: 2.2.1

cpe:2.3:a:apache:openoffice:2.2.1
Apache » Openoffice » Version: 2.3.0

cpe:2.3:a:apache:openoffice:2.3.0
Apache » Openoffice » Version: 2.3.1

cpe:2.3:a:apache:openoffice:2.3.1
Apache » Openoffice » Version: 2.4.0

cpe:2.3:a:apache:openoffice:2.4.0
Apache » Openoffice » Version: 2.4.1

cpe:2.3:a:apache:openoffice:2.4.1
Apache » Openoffice » Version: 2.4.2

cpe:2.3:a:apache:openoffice:2.4.2
Apache » Openoffice » Version: 2.4.3

cpe:2.3:a:apache:openoffice:2.4.3
Apache » Openoffice » Version: 3.0.0

cpe:2.3:a:apache:openoffice:3.0.0
Apache » Openoffice » Version: 3.0.1

cpe:2.3:a:apache:openoffice:3.0.1
Apache » Openoffice » Version: 3.1.0

cpe:2.3:a:apache:openoffice:3.1.0
Apache » Openoffice » Version: 3.1.1

cpe:2.3:a:apache:openoffice:3.1.1
Apache » Openoffice » Version: 3.2.0

cpe:2.3:a:apache:openoffice:3.2.0
Apache » Openoffice » Version: 3.2.1

cpe:2.3:a:apache:openoffice:3.2.1
Apache » Openoffice » Version: 3.3.0

cpe:2.3:a:apache:openoffice:3.3.0
Apache » Openoffice » Version: 3.4.0

cpe:2.3:a:apache:openoffice:3.4.0
Apache » Openoffice » Version: 3.4.1

cpe:2.3:a:apache:openoffice:3.4.1
Apache » Openoffice » Version: 4.0.0

cpe:2.3:a:apache:openoffice:4.0.0
Apache » Openoffice » Version: 4.0.1

cpe:2.3:a:apache:openoffice:4.0.1
Apache » Openoffice » Version: 4.1.0

cpe:2.3:a:apache:openoffice:4.1.0
Apache » Openoffice » Version: 4.1.1

cpe:2.3:a:apache:openoffice:4.1.1
Apache » Openoffice » Version: 4.1.10

cpe:2.3:a:apache:openoffice:4.1.10
Apache » Openoffice » Version: 4.1.2

cpe:2.3:a:apache:openoffice:4.1.2
Apache » Openoffice » Version: 4.1.3

cpe:2.3:a:apache:openoffice:4.1.3
Apache » Openoffice » Version: 4.1.4

cpe:2.3:a:apache:openoffice:4.1.4
Apache » Openoffice » Version: 4.1.5

cpe:2.3:a:apache:openoffice:4.1.5
Apache » Openoffice » Version: 4.1.6

cpe:2.3:a:apache:openoffice:4.1.6
Apache » Openoffice » Version: 4.1.7

cpe:2.3:a:apache:openoffice:4.1.7
Apache » Openoffice » Version: 4.1.8

cpe:2.3:a:apache:openoffice:4.1.8
Apache » Openoffice » Version: 4.1.9

cpe:2.3:a:apache:openoffice:4.1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40439

Products

Pricing

Contact Us