There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libxml2-devel | May 4, 2022 | May 19, 2021 | |
| Alpine Linux | alpine-linux-upgrade-libxml2alpine-linux-upgrade-qt5-qtwebengine | Mar 26, 2024 | May 19, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-java-1-8-0-amazon-correttoamazon-linux-ami-2-upgrade-java-1-8-0-amazon-corretto-develamazon-linux-ami-2-upgrade-java-11-amazon-correttoamazon-linux-ami-2-upgrade-java-11-amazon-corretto-headlessamazon-linux-ami-2-upgrade-java-11-amazon-corretto-javadocamazon-linux-ami-2-upgrade-libxml2amazon-linux-ami-2-upgrade-libxml2-debuginfoamazon-linux-ami-2-upgrade-libxml2-develamazon-linux-ami-2-upgrade-libxml2-pythonamazon-linux-ami-2-upgrade-libxml2-static | Jun 24, 2021 | May 19, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-libxml2 | May 4, 2023 | May 5, 2021 |
| Azul Zulu | azul-zulu-jdk8azul-zulu-jdk11azul-zulu-jdk13azul-zulu-jdk15 | Nov 30, 2021 | May 19, 2021 | |
| Centos_linux | — | centos-upgrade-libxml2centos-upgrade-libxml2-debuginfocentos-upgrade-libxml2-debugsourcecentos-upgrade-libxml2-develcentos-upgrade-python3-libxml2centos-upgrade-python3-libxml2-debuginfo | Jun 30, 2021 | May 19, 2021 |
| Debian | debian-upgrade-libxml2 | May 12, 2021 | May 12, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-libxml2 | Jul 8, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libxml2huawei-euleros-2_0_sp2-upgrade-libxml2-develhuawei-euleros-2_0_sp2-upgrade-libxml2-python | Sep 16, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libxml2huawei-euleros-2_0_sp3-upgrade-libxml2-develhuawei-euleros-2_0_sp3-upgrade-libxml2-python | Oct 26, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libxml2huawei-euleros-2_0_sp5-upgrade-libxml2-develhuawei-euleros-2_0_sp5-upgrade-libxml2-python | Sep 7, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libxml2huawei-euleros-2_0_sp8-upgrade-libxml2-develhuawei-euleros-2_0_sp8-upgrade-python2-libxml2huawei-euleros-2_0_sp8-upgrade-python3-libxml2 | Aug 10, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libxml2huawei-euleros-2_0_sp9-upgrade-python3-libxml2 | Aug 10, 2021 | May 19, 2021 | |
| Jre Vuln | jre-upgrade-latest | Oct 20, 2021 | May 19, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-libxml2-2-9-12-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-library-libxslt-1-1-33-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-library-python-libxml2-27-2-9-12-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-library-python-libxml2-37-2-9-12-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-library-python-libxml2-39-2-9-12-11-4-39-0-1-107-0 | Nov 17, 2021 | May 19, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-libxml2oracle-linux-upgrade-libxml2-develoracle-linux-upgrade-python3-libxml2 | Jul 3, 2021 | Apr 22, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libxml2redhat-upgrade-libxml2-debuginforedhat-upgrade-libxml2-debugsourceredhat-upgrade-libxml2-develredhat-upgrade-python3-libxml2redhat-upgrade-python3-libxml2-debuginfo | Jun 30, 2021 | May 19, 2021 | |
| Rocky_linux | rocky-upgrade-libxml2rocky-upgrade-libxml2-debuginforocky-upgrade-libxml2-debugsourcerocky-upgrade-libxml2-develrocky-upgrade-python3-libxml2rocky-upgrade-python3-libxml2-debuginfo | May 5, 2022 | May 19, 2021 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | May 19, 2021 | |
| Suse | — | suse-upgrade-libqt5-qtwebenginesuse-upgrade-libxml2suse-upgrade-libxml2-2suse-upgrade-libxml2-2-32bitsuse-upgrade-libxml2-32bitsuse-upgrade-libxml2-develsuse-upgrade-libxml2-devel-32bitsuse-upgrade-libxml2-docsuse-upgrade-libxml2-pythonsuse-upgrade-libxml2-toolssuse-upgrade-python-libxml2suse-upgrade-python2-libxml2-pythonsuse-upgrade-python3-libxml2suse-upgrade-python3-libxml2-python | May 6, 2021 | May 5, 2021 |
| Ubuntu | ubuntu-pro-upgrade-libxml2ubuntu-pro-upgrade-libxml2-utilsubuntu-upgrade-libxml2ubuntu-upgrade-libxml2-utils | Jun 18, 2021 | May 5, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub