SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 69248: SAS® Environment Manager contains an XStream library that is affected by CVE-2021-43859

DetailsHotfixAboutRate It

Severity: High

Description: SAS Environment Manager contains an XStream library that is affected by CVE-2021-43859.

Potential Impact: The vulnerability described by CVE-2021-43859 might allow a Denial-of-Service attack. Refer to the CVE record for details. 

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Environment ManagerMicrosoft® Windows® for x642.5_M49.4 TS1M7
64-bit Enabled AIX2.5_M49.4 TS1M7
64-bit Enabled Solaris2.5_M49.4 TS1M7
HP-UX IPF2.5_M49.4 TS1M7
Linux for x642.5_M49.4 TS1M7
Solaris for x642.5_M49.4 TS1M7
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.