Skip to content
fr Sign in
8.6 High

CVE-2021-3517 There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11

Description

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

Affected products and versions

Product Affected versions Fixed in
libxml2 Versions not published
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of libxml2

The 7 CVEs of libxml2 →
CVE-2025-8732 A vulnerability was found in libxml2 up to 2.14.5 4.8 Medium CVE-2016-3709 Possible cross-site scripting vulnerability in libxml after commit 960f0e2 Not rated CVE-2021-3541 A flaw was found in libxml2 Not rated CVE-2021-3516 There's a flaw in libxml2's xmllint in versions before 2.9.11 Not rated
Track this CVE