Vulnerability · Published May 18, 2021 · Assigned by redhat

CVE-2021-3518

High 8.8

In plain English

A high-severity use-after-free in libxml2. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 21.9% (higher than 98% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)8.8High

Exploit odds (30 days)21.9%top 2.3% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:8	libxml2-devel	2.9.7-9.el8_4.2	ALSA-2021:2569
Alpine:v3.20	libxml2	2.9.11-r0	ALPINE-CVE-2021-3518
Alpine:v3.21	libxml2	2.9.11-r0	ALPINE-CVE-2021-3518
Alpine:v3.22	libxml2	2.9.11-r0	ALPINE-CVE-2021-3518
Alpine:v3.23	libxml2	2.9.11-r0	ALPINE-CVE-2021-3518
Alpine:v3.24	libxml2	2.9.11-r0	ALPINE-CVE-2021-3518
Debian:12	libxml2	2.9.10+dfsg-6.6	DEBIAN-CVE-2021-3518
Debian:13	libxml2	2.9.10+dfsg-6.6	DEBIAN-CVE-2021-3518
Debian:14	libxml2	2.9.10+dfsg-6.6	DEBIAN-CVE-2021-3518
Rocky Linux:8	libxml2	0:2.9.7-9.el8_4.2	RLSA-2021:2569
RubyGems	nokogiri	1.11.4	GHSA-v4f8-2847-rwm7

Affected products (as reported)

Vendor	Product	Versions
n/a	libxml2	libxml2 2.9.11

Weakness: CWE-416

References

FEDORA-2021-e3ed1ba38b vendor-advisory, x_refsource_FEDORA
[debian-lts-announce] 20210510 [SECURITY] [DLA 2653-1] libxml2 security update mailing-list, x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1954242 x_refsource_MISC
FEDORA-2021-b950000d2b vendor-advisory, x_refsource_FEDORA
[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list, x_refsource_MLIST
[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list, x_refsource_MLIST
GLSA-202107-05 vendor-advisory, x_refsource_GENTOO
https://security.netapp.com/advisory/ntap-20210625-0002/ x_refsource_CONFIRM
20210723 APPLE-SA-2021-07-21-5 watchOS 7.6 mailing-list, x_refsource_FULLDISC
20210723 APPLE-SA-2021-07-21-1 iOS 14.7 and iPadOS 14.7 mailing-list, x_refsource_FULLDISC
20210723 APPLE-SA-2021-07-21-2 macOS Big Sur 11.5 mailing-list, x_refsource_FULLDISC
20210723 APPLE-SA-2021-07-21-6 tvOS 14.7 mailing-list, x_refsource_FULLDISC
https://www.oracle.com/security-alerts/cpuoct2021.html x_refsource_MISC
https://support.apple.com/kb/HT212605 x_refsource_CONFIRM
https://support.apple.com/kb/HT212602 x_refsource_CONFIRM
https://support.apple.com/kb/HT212601 x_refsource_CONFIRM
https://support.apple.com/kb/HT212604 x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuapr2022.html x_refsource_MISC
https://www.oracle.com/security-alerts/cpujul2022.html x_refsource_MISC
https://cert-portal.siemens.com/productcert/html/ssa-398330.html