There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
|
History
07 Nov 2023, 03:38
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-05-18 12:15
Updated : 2024-02-28 18:28
NVD link : CVE-2021-3518
Mitre link : CVE-2021-3518
CVE.ORG link : CVE-2021-3518
JSON object : View
Products Affected
redhat
- enterprise_linux
- jboss_core_services
netapp
- active_iq_unified_manager
- clustered_data_ontap_antivirus_connector
- clustered_data_ontap
- manageability_software_development_kit
- ontap_select_deploy_administration_utility
- hci_h410c_firmware
- hci_h410c
- snapdrive
oracle
- enterprise_manager_base_platform
- peoplesoft_enterprise_peopletools
- real_user_experience_insight
- enterprise_manager_ops_center
- mysql_workbench
- communications_cloud_native_core_network_function_cloud_native_environment
xmlsoft
- libxml2
fedoraproject
- fedora
debian
- debian_linux
CWE
CWE-416
Use After Free