Vulnerabilities > CVE-2021-3517 - Out-of-bounds Write vulnerability in multiple products

047910
CVSS 8.6 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
HIGH

Summary

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

Vulnerable Configurations

Part Description Count
Application
Xmlsoft
172
Application
Redhat
1
Application
Netapp
32
Application
Oracle
30
OS
Redhat
1
OS
Fedoraproject
2
OS
Debian
1
OS
Netapp
1
Hardware
Netapp
1

Common Weakness Enumeration (CWE)