Vulnerability · Published May 19, 2021 · Assigned by redhat

CVE-2021-3517

High 8.6

In plain English

A high-severity out-of-bounds write in libxml2. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 17.0% (higher than 97% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.6High

Exploit odds (30 days)17.0%top 2.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:8	libxml2-devel	2.9.7-9.el8_4.2	ALSA-2021:2569
Alpine:v3.20	libxml2	2.9.11-r0	ALPINE-CVE-2021-3517
Alpine:v3.21	libxml2	2.9.11-r0	ALPINE-CVE-2021-3517
Alpine:v3.22	libxml2	2.9.11-r0	ALPINE-CVE-2021-3517
Alpine:v3.23	libxml2	2.9.11-r0	ALPINE-CVE-2021-3517
Alpine:v3.24	libxml2	2.9.11-r0	ALPINE-CVE-2021-3517
Alpine:v3.20	qt5-qtwebengine	5.15.3_git20211112-r0	ALPINE-CVE-2021-3517
Alpine:v3.21	qt5-qtwebengine	5.15.3_git20211112-r0	ALPINE-CVE-2021-3517
Alpine:v3.22	qt5-qtwebengine	5.15.3_git20211112-r0	ALPINE-CVE-2021-3517
Alpine:v3.23	qt5-qtwebengine	5.15.3_git20211112-r0	ALPINE-CVE-2021-3517
Debian:12	libxml2	2.9.10+dfsg-6.6	DEBIAN-CVE-2021-3517
Debian:13	libxml2	2.9.10+dfsg-6.6	DEBIAN-CVE-2021-3517
Debian:14	libxml2	2.9.10+dfsg-6.6	DEBIAN-CVE-2021-3517
Rocky Linux:8	libxml2	0:2.9.7-9.el8_4.2	RLSA-2021:2569
RubyGems	nokogiri	1.11.4	GHSA-jw9f-hh49-cvp9

Affected products (as reported)

Vendor	Product	Versions
n/a	libxml2	libxml2 2.9.11

Weakness: CWE-787, CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

References

FEDORA-2021-e3ed1ba38b vendor-advisory, x_refsource_FEDORA
[debian-lts-announce] 20210510 [SECURITY] [DLA 2653-1] libxml2 security update mailing-list, x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1954232 x_refsource_MISC
FEDORA-2021-b950000d2b vendor-advisory, x_refsource_FEDORA
[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list, x_refsource_MLIST
[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list, x_refsource_MLIST
GLSA-202107-05 vendor-advisory, x_refsource_GENTOO
https://security.netapp.com/advisory/ntap-20210625-0002/ x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuoct2021.html x_refsource_MISC
https://www.oracle.com/security-alerts/cpujan2022.html x_refsource_MISC
https://security.netapp.com/advisory/ntap-20211022-0004/ x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuapr2022.html x_refsource_MISC
https://www.oracle.com/security-alerts/cpujul2022.html x_refsource_MISC
https://cert-portal.siemens.com/productcert/html/ssa-398330.html