CVE-2021-3518
18.05.2021, 12:15
There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.Enginsight
| Vendor | Product | Version |
|---|---|---|
| xmlsoft | libxml2 | 𝑥 < 2.9.11 |
| debian | debian_linux | 9.0 |
| redhat | jboss_core_services | - |
| redhat | enterprise_linux | 8.0 |
| netapp | active_iq_unified_manager | - |
| netapp | clustered_data_ontap | - |
| netapp | clustered_data_ontap_antivirus_connector | - |
| netapp | manageability_software_development_kit | - |
| netapp | ontap_select_deploy_administration_utility | - |
| netapp | snapdrive | - |
| netapp | hci_h410c_firmware | - |
| oracle | communications_cloud_native_core_network_function_cloud_native_environment | 1.10.0 |
| oracle | enterprise_manager_base_platform | 13.4.0.0 |
| oracle | enterprise_manager_base_platform | 13.5.0.0 |
| oracle | enterprise_manager_ops_center | 12.4.0.0 |
| oracle | mysql_workbench | 𝑥 ≤ 8.0.26 |
| oracle | peoplesoft_enterprise_peopletools | 8.58 |
| oracle | real_user_experience_insight | 13.4.1.0 |
| oracle | real_user_experience_insight | 13.5.1.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libxml2 |
|
Common Weakness Enumeration
References