İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 8.8

CVE-2021-3518: Libxml2: serbest bırakılmış belleğin kullanımı

Yayın: · Güncelleme:

Açıklama (NVD)

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

Özet bilgiler

Ürün
Xmlsoft Libxml2
CVSS v3.1
8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
%21,86 (yüzdelik 98)
CWE
CWE-416
Yama
Mevcut

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
xmlsoft-libxml2——2.9.11
debian-debian-linux9.09.0—
redhat-jboss-core-services———
redhat-enterprise-linux8.08.0—
fedoraproject-fedora3333—
fedoraproject-fedora3434—
netapp-active-iq-unified-manager———
netapp-clustered-data-ontap———
netapp-clustered-data-ontap-antivirus-connector———
netapp-manageability-software-development-kit———
netapp-ontap-select-deploy-administration-utility———
netapp-snapdrive———
netapp-hci-h410c-firmware———
oracle-communications-cloud-native-core-network-function-cloud-native-environment1.10.01.10.0—
oracle-enterprise-manager-base-platform13.4.0.013.4.0.0—
oracle-enterprise-manager-base-platform13.5.0.013.5.0.0—
oracle-enterprise-manager-ops-center12.4.0.012.4.0.0—
oracle-mysql-workbench—8.0.26—
oracle-peoplesoft-enterprise-peopletools8.588.58—
oracle-real-user-experience-insight13.4.1.013.4.1.0—
oracle-real-user-experience-insight13.5.1.013.5.1.0—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları