CVE-2021-3516High· 7.8▾ TwilightThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity,…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.0%
There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.
xmllint < 2.9.11debian_linux = 9.0fedora = 33fedora = 34jboss_core_servicesenterprise_linux = 6.0enterprise_linux = 7.0enterprise_linux = 8.0clustered_data_ontapclustered_data_ontap_antivirus_connectorontap_select_deploy_administration_utilityzfs_storage_appliance_kit = 8.8Upgrade past the affected range:
xmllint 2.9.11Connected by shared product, vendor, weakness, or advisory.
CVE-2021-3518High· 8.8There's a flaw in libxml2 in versions before 2.9.11
CVE-2021-3541Medium· 6.5A flaw was found in libxml2
CVE-2021-3517High· 8.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11
CVE-2021-3537Medium· 5.9A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference
CVE-2020-24977Medium· 6.5GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c
CVE-2021-22901High· 8.1curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection