High · published June 1, 2021
There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.
| Product | Versions | Fixed in |
|---|---|---|
| xmlsoft/xmllint | < 2.9.11 | 2.9.11 |
| debian/debian_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| redhat/jboss_core_services | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| netapp/clustered_data_ontap | all versions | — |
| netapp/clustered_data_ontap_antivirus_connector | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| oracle/zfs_storage_appliance_kit | all versions | — |