CVE-2021-3517

Published: May 19, 2021Modified: Jun 17, 2026

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Exploitability: 3.9 / Impact: 4.7

Source: NVD

Description

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

Affected (33)

Products: Xmlsoft: Libxml2 · Redhat: Enterprise Linux, Jboss Core Services · Fedoraproject: Fedora · +3 more

Show all products

1 product

2 products

1 product

1 product

16 products

Active Iq Unified Manager

Clustered Data Ontap

Clustered Data Ontap Antivirus Connector

E Series Santricity Os Controller

E Series Santricity Storage Manager

E Series Santricity Web Services

Hci Management Node

Manageability Software Development Kit

Oncommand Insight

Oncommand Workflow Automation

Ontap Select Deploy Administration Utility

Santricity Unified Manager

7 products

Communications Cloud Native Core Network Function Cloud Native Environment

Enterprise Manager Base Platform

Mysql Workbench

Openjdk

Peoplesoft Enterprise Peopletools

Real User Experience Insight

Zfs Storage Appliance Kit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxml2	Before 2.9.11

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 8.0
Redhat Jboss Core Services	All versions

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 33
Fedoraproject Fedora	Version 34

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0

Configuration E

17 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Clustered Data Ontap	All versions
Netapp Clustered Data Ontap Antivirus Connector	All versions
Netapp E Series Santricity Os Controller	From 11.0.0 to 11.70.1
Netapp E Series Santricity Storage Manager	All versions
Netapp E Series Santricity Web Services	All versions
Netapp Hci Management Node	All versions
Netapp Manageability Software Development Kit	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Santricity Unified Manager	All versions
Netapp Snapdrive	All versions
Netapp Snapmanager	All versions
Netapp Snapmanager	All versions
Netapp Solidfire	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Hci H410c Firmware	All versions

Running on/with	Platform Versions
Netapp Hci H410c	All versions

Configuration G

9 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Cloud Native Core Network Function Cloud Native Environment	Version 1.10.0
Oracle Enterprise Manager Base Platform	Version 13.4.0.0
Oracle Enterprise Manager Base Platform	Version 13.5.0.0
Oracle Mysql Workbench	Up to 8.0.26
Oracle Openjdk	Version 8 update301
Oracle Peoplesoft Enterprise Peopletools	Version 8.58
Oracle Real User Experience Insight	Version 13.4.1.0
Oracle Real User Experience Insight	Version 13.5.1.0
Oracle Zfs Storage Appliance Kit	Version 8.8