Search/CVE-2021-3518
● CVE — High

CVE-2021-3518

Vendordebian, fedoraproject, redhat, netapp, oracleProductdebian linux, fedora, enterprise linux, clustered data ontap, peoplesoft enterprise peopletools, active iq unified manager, enterprise manager ops center, libxml2, jboss core services, enterprise manager base platform, snapdrive, real user experience insight, mysql workbench, communications cloud native core network function cloud native environment, ontap select deploy administration utility, clustered data ontap antivirus connector, manageability software development kit, hci h410c firmwareDiscoveredMay 18, 2021UpdatedNov 21, 2024

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

CVSS v3.1
8.8 HIGH
EPSS
21.9%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
May 18, 2021
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024