Back to search
CVE-2021-3518
Published: May 18, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.
| Vendor | Product | Versions |
|---|---|---|
n/a | libxml2 | affected libxml2 2.9.11 |
Weaknesses (CWE)
References
FEDORA-2021-e3ed1ba38b
vendor-advisory
x_refsource_FEDORA
[debian-lts-announce] 20210510 [SECURITY] [DLA 2653-1] libxml2 security update
mailing-list
x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1954242
x_refsource_MISC
FEDORA-2021-b950000d2b
vendor-advisory
x_refsource_FEDORA
GLSA-202107-05
vendor-advisory
x_refsource_GENTOO
https://security.netapp.com/advisory/ntap-20210625-0002/
x_refsource_CONFIRM
20210723 APPLE-SA-2021-07-21-5 watchOS 7.6
mailing-list
x_refsource_FULLDISC
20210723 APPLE-SA-2021-07-21-1 iOS 14.7 and iPadOS 14.7
mailing-list
x_refsource_FULLDISC
20210723 APPLE-SA-2021-07-21-2 macOS Big Sur 11.5
mailing-list
x_refsource_FULLDISC
20210723 APPLE-SA-2021-07-21-6 tvOS 14.7
mailing-list
x_refsource_FULLDISC
https://www.oracle.com/security-alerts/cpuoct2021.html
x_refsource_MISC
https://support.apple.com/kb/HT212605
x_refsource_CONFIRM
https://support.apple.com/kb/HT212602
x_refsource_CONFIRM
https://support.apple.com/kb/HT212601
x_refsource_CONFIRM
https://support.apple.com/kb/HT212604
x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuapr2022.html
x_refsource_MISC
https://www.oracle.com/security-alerts/cpujul2022.html
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now