8.6
Élevée
CVE-2021-3517 There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11
Description
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libxml2 | Versions non publiées | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- FEDORA-2021-e3ed1ba38b lists.fedoraproject.org
- [debian-lts-announce] 20210510 [SECURITY] [DLA 2653-1] libxml2 security update lists.debian.org
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2021-b950000d2b lists.fedoraproject.org
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 lists.apache.org
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 lists.apache.org
- GLSA-202107-05 security.gentoo.org
- security.netapp.com security.netapp.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- security.netapp.com security.netapp.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de libxml2
Les 7 CVE de libxml2 →
CVE-2025-8732
A vulnerability was found in libxml2 up to 2.14.5
4.8
Moyenne
CVE-2016-3709
Possible cross-site scripting vulnerability in libxml after commit 960f0e2
Non notée
CVE-2021-3541
A flaw was found in libxml2
Non notée
CVE-2021-3516
There's a flaw in libxml2's xmllint in versions before 2.9.11
Non notée