Back to search
CVE-2021-3516
Published: Jun 1, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.
| Vendor | Product | Versions |
|---|---|---|
n/a | libxml2 | affected libxml2 2.9.11 |
Weaknesses (CWE)
References
FEDORA-2021-e3ed1ba38b
vendor-advisory
x_refsource_FEDORA
[debian-lts-announce] 20210510 [SECURITY] [DLA 2653-1] libxml2 security update
mailing-list
x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1954225
x_refsource_MISC
FEDORA-2021-b950000d2b
vendor-advisory
x_refsource_FEDORA
GLSA-202107-05
vendor-advisory
x_refsource_GENTOO
https://www.oracle.com/security-alerts/cpujan2022.html
x_refsource_MISC
https://gitlab.gnome.org/GNOME/libxml2/-/issues/230
x_refsource_MISC
https://security.netapp.com/advisory/ntap-20210716-0005/
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now