CVE-2021-3518

01/תיאור (מקור, אנגלית)

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

02/מוצרים מושפעים

xmlsoft: libxml2; debian: debian linux; redhat: jboss core services; redhat: enterprise linux; fedoraproject: fedora; netapp: active iq unified manager; netapp: clustered data ontap; netapp: clustered data ontap antivirus connector; netapp: manageability software development kit; netapp: ontap select deploy administration utility; netapp: snapdrive; netapp: hci h410c firmware; netapp: hci h410c; oracle: communications cloud native core network function cloud native environment; oracle: enterprise manager base platform

03/קישורים10

• bugzilla.redhat.com/show_bug.cgi?id=1954242 Issue TrackingPatchThird Party Advisory
• www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
• www.oracle.com/security-alerts/cpuoct2021.html PatchThird Party Advisory
• bugzilla.redhat.com/show_bug.cgi?id=1954242 Issue TrackingPatchThird Party Advisory
• www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
• www.oracle.com/security-alerts/cpuoct2021.html PatchThird Party Advisory
• seclists.org/fulldisclosure/2021/Jul/54 Mailing ListThird Party Advisory
• seclists.org/fulldisclosure/2021/Jul/55 Mailing ListThird Party Advisory
• seclists.org/fulldisclosure/2021/Jul/58 Mailing ListThird Party Advisory
• seclists.org/fulldisclosure/2021/Jul/59 Mailing ListThird Party Advisory