There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libxml2-devel | May 4, 2022 | May 18, 2021 |
| Alpine Linux | — | Upgrade libxml2 | Mar 26, 2024 | May 18, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libxml2-staticUpgrade libxml2-debuginfoUpgrade libxml2-develUpgrade libxml2-pythonUpgrade libxml2 | Jul 2, 2021 | May 18, 2021 |
| Amazon_linux | — | Upgrade libxml2 | May 4, 2023 | May 5, 2021 |
| Apple Osx Amdkernel | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Analytics | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Appkit | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Appstore | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Audio | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Coreaudio | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Coregraphics | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Corestorage | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Coretext | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Crashreporter | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Cvms | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Dyld | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Familysharing | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Findmy | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Fontparser | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Identityservices | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Intelgraphicsdriver | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Iokit | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Kextmanagement | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Launchservices | — | — | Oct 14, 2024 | May 18, 2021 |
| Apple Osx Libxml2 | — | Upgrade macOS to the latest version | Aug 23, 2021 | May 18, 2021 |
| Centos_linux | — | Upgrade python3-libxml2-debuginfoUpgrade python3-libxml2Upgrade libxml2Upgrade libxml2-debugsourceUpgrade libxml2-debuginfoUpgrade libxml2-devel | Jun 30, 2021 | May 18, 2021 |
| Debian | — | Upgrade libxml2 | May 12, 2021 | May 12, 2021 |
| Gentoo Linux | — | Upgrade dev-libs/libxml2. | Jul 8, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | Sep 16, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | Sep 7, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-libxml2Upgrade python3-libxml2Upgrade libxml2Upgrade libxml2-devel | Aug 10, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-libxml2Upgrade libxml2 | Aug 10, 2021 | May 18, 2021 |
| Oracle Solaris | — | Upgrade library/libxslt to version 1.1.33-11.4.39.0.1.107.0 on Solaris 11.4Upgrade library/libxml2 to version 2.9.12-11.4.39.0.1.107.0 on Solaris 11.4Upgrade library/python/libxml2-39 to version 2.9.12-11.4.39.0.1.107.0 on Solaris 11.4Upgrade library/python/libxml2-27 to version 2.9.12-11.4.39.0.1.107.0 on Solaris 11.4Upgrade library/python/libxml2-37 to version 2.9.12-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | May 18, 2021 |
| Oracle_linux | — | Upgrade python3-libxml2Upgrade libxml2Upgrade libxml2-devel | Jul 3, 2021 | Apr 22, 2021 |
| Redhat_linux | — | Upgrade python3-libxml2-debuginfoUpgrade libxml2Upgrade libxml2-debuginfoUpgrade libxml2-develNo solution existsUpgrade libxml2-debugsourceUpgrade python3-libxml2 | Jun 30, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade libxml2-debuginfoUpgrade libxml2-develUpgrade python3-libxml2-debuginfoUpgrade libxml2Upgrade python3-libxml2Upgrade libxml2-debugsource | May 5, 2022 | May 18, 2021 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.10Upgrade Splunk Enterprise to version 9.0.4Upgrade Splunk Enterprise to version 8.1.13 | Sep 30, 2025 | May 18, 2021 |
| Suse | — | Upgrade libxml2Upgrade libxml2-develUpgrade libxml2-pythonUpgrade python-libxml2Upgrade python3-libxml2-pythonUpgrade libxml2-devel-32bitUpgrade python2-libxml2-pythonUpgrade libxml2-32bitUpgrade libxml2-toolsUpgrade python3-libxml2Upgrade libxml2-docUpgrade libxml2-2Upgrade libxml2-2-32bit | May 6, 2021 | May 5, 2021 |
| Ubuntu | — | Upgrade libxml2-utils (Ubuntu Pro)Upgrade libxml2-utilsUpgrade libxml2Upgrade libxml2 (Ubuntu Pro) | Jun 18, 2021 | May 5, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub