CVE-2021-3518 - Xmlsoft Libxml2, Debian Debian Linux and Redhat Jboss Core Services

Critical 8.8

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

Affected software

Xmlsoft Libxml2

Debian Debian Linux

Redhat Jboss Core Services

Redhat Enterprise Linux

Fedoraproject Fedora

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.