IM
IronMonkey Threat Research

CVE-2021-3516 HIGH

Published: 2021-06-01 | Last Modified: 2024-11-21 | Status: Modified

Description

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.

Additional Descriptions (1)

Se encontró un fallo en xmllint de libxml2 en versiones anteriores a 2.9.11. Un atacante que es capaz de enviar un archivo diseñado para ser procesado por xmllint podría desencadenar un uso de la memoria previamente liberada. El mayor impacto de este fallo es la confidencialidad, integridad y disponibilidad

CVSS Metrics

Base Score: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 5.9

Base Score: 6.8 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-416
[email protected] Primary
en CWE-416

Affected Products

Vendor Product Version Update Type
xmlsoft xmllint * <built-in method update of dict object at 0x7fd36be62b40> Application
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd36be635c0> Operating System
fedoraproject fedora 33 <built-in method update of dict object at 0x7fd36936d840> Operating System
fedoraproject fedora 34 <built-in method update of dict object at 0x7fd2a15baf80> Operating System
redhat jboss_core_services - <built-in method update of dict object at 0x7fd36be603c0> Application
redhat enterprise_linux 6.0 <built-in method update of dict object at 0x7fd36be61880> Operating System
redhat enterprise_linux 7.0 <built-in method update of dict object at 0x7fd369abd0c0> Operating System
redhat enterprise_linux 8.0 <built-in method update of dict object at 0x7fd36a7ed000> Operating System
netapp clustered_data_ontap - <built-in method update of dict object at 0x7fd3844247c0> Application
netapp clustered_data_ontap_antivirus_connector - <built-in method update of dict object at 0x7fd36be63fc0> Application
netapp ontap_select_deploy_administration_utility - <built-in method update of dict object at 0x7fd36b187400> Application
oracle zfs_storage_appliance_kit 8.8 <built-in method update of dict object at 0x7fd36be62f00> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:xmlsoft:xmllint:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

References