NetSight
IP …
high7.8

CVE-2021-3516

There's a flaw in libxml2's xmllint in versions before 2.9.11.

Impact

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.

Affected products

VendorProductAffected versions
XmlsoftXmllint
before 2.9.11
DebianDebian Linux
Version 9.0
FedoraprojectFedora
Versions 33, 34
RedhatJboss Core Services
All versions
RedhatEnterprise Linux
Versions 6.0, 7.0, 8.0
NetappClustered Data Ontap
All versions
NetappClustered Data Ontap Antivirus Connector
All versions
NetappOntap Select Deploy Administration Utility
All versions
OracleZfs Storage Appliance Kit
Version 8.8

Weakness classification

CWE-416

References