Use-after-free in Libxml2 - CVE-2021-3518

Vulnerability identifier: #VU54225

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3518

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in libxml2. A remote attacker can use a specially crafted file and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Libxml2
HPE B-series SN6750B Fibre Channel Switch
HPE B-series SN6700B Fibre Channel Switch
HPE B-series SN6650B Fibre Channel Switch
HPE B-series SN6600B Fibre Channel Switch
HPE B-series SN4700B SAN Extension Switch
HPE B-series SN3600B Fibre Channel Switch
HPE B-series SN2600B SAN Extension Switch
HPE SN8600B 8-slot SAN Director Switch
HPE SN8600B 4-slot SAN Director Switch
HPE SN8700B 8-slot SAN Director Switch
HPE SN8700B 4-slot SAN Director Switch
Brocade 32Gb Fibre Channel SAN Switch for HPE Synergy
Amazon Linux AMI
Gentoo Linux
ClevOS
SUSE MicroOS
watchOS
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for ARM 64
HPE Helion Openstack
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
macOS
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
tvOS
iPadOS
Apple iOS
Ubuntu
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Python2
openEuler
Fedora
Brocade Fabric OS
cflinuxfs3
APM Edge
IBM InfoSphere Identity Insight
Dell Command | Update
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
jbcs-httpd24-openssl-chil (Red Hat package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-nghttp2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
jbcs-httpd24-curl (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
libxml2
libxml2-doc
libxml2-python
libxml2-32bit
libxml2-debuginfo
libxml2-debugsource
libxml2-python-debuginfo
libxml2-python-debugsource
libxml2-utils (Ubuntu package)
libxml2 (Ubuntu package)
libxml2-2-32bit
libxml2-tools
libxml2-2-debuginfo
libxml2-2
libxml2-tools-debuginfo
python-libxml2
python-libxml2-debuginfo
python-libxml2-debugsource
libxml2-devel
libxml2-2-debuginfo-32bit
libxml2-2-32bit-debuginfo
python-libxml2-python-debugsource
python2-libxml2-python
python2-libxml2-python-debuginfo
python3-libxml2-python
python3-libxml2-python-debuginfo
libxml2 (Red Hat package)
python3-libxml2
libxml2-help
python2-libxml2
Migration Toolkit for Containers
Service Telemetry Framework
Enterprise Manager Base Platform
Cloud Pak for Security (CP4S)
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
Red Hat OpenShift Jaeger
JBoss Core Services
MySQL Workbench
PeopleSoft Enterprise PeopleTools
IBM Cognos Analytics
IBM Security Verify Access
IBM Integrated Analytics System
Web Terminal
OpenShift Virtualization
SecurID Authentication Manager

Install updates from vendor's website.

Libxml2 - update to 2.9.11
cflinuxfs3 - update to 0.245.0
jbcs-httpd24-openssl-pkcs11 (Red Hat package) - addressed in versions 0.4.10-26.el8jbcs, 0.4.10-26.jbcs.el7
APM Edge - update to 4.0
jbcs-httpd24-openssl-chil (Red Hat package) - addressed in versions 1.0.0-11.el8jbcs, 1.0.0-11.jbcs.el7
Migration Toolkit for Containers - addressed in versions 1.4.6, 1.5.1
jbcs-httpd24-apr-util (Red Hat package) - addressed in versions 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7
Cloud Pak for Security (CP4S) - update to 1.8.0.0
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.7-22.el8jbcs, 1.15.7-22.jbcs.el7
Red Hat OpenShift Jaeger - addressed in versions 1.20.5, 1.24.0
jbcs-httpd24-nghttp2 (Red Hat package) - addressed in versions 1.39.2-41.el8jbcs, 1.39.2-41.jbcs.el7
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.0.8-41.el8jbcs, 2.0.8-41.jbcs.el7
JBoss Core Services - update to 2.4.37 SP11
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.37-80.el8jbcs, 2.4.37-80.jbcs.el7
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7
watchOS - update to 7.6 18U63
jbcs-httpd24-curl (Red Hat package) - addressed in versions 7.78.0-3.el8jbcs, 7.78.0-3.jbcs.el7
MySQL Workbench - update to 8.0.27
macOS - update to 11.5 20G71
tvOS - update to 14.7 18M60
iPadOS - addressed in versions 14.7 18G69, 14.7 18G70
Apple iOS - update to 14.7 18G69
IBM Integrated Analytics System - update to 1.0.30.0
Web Terminal - update to 1.3
OpenShift Virtualization - addressed in versions 2.6.6, 4.8.0, 4.8.1
libxml2 - update to 2.7.6-0.77.36.1
libxml2-doc - addressed in versions 2.7.6-0.77.36.1, 2.9.4-46.40.1, 2.9.4-46.43.1
libxml2-python - update to 2.7.6-0.77.36.1
libxml2-32bit - update to 2.7.6-0.77.36.1
libxml2-debuginfo - update to 2.7.6-0.77.36.1
libxml2-debugsource - addressed in versions 2.7.6-0.77.36.1, 2.9.4-46.40.1, 2.9.4-46.43.1, 2.9.7-3.31.1, 2.9.7-3.34.1
libxml2-python-debuginfo - update to 2.7.6-0.77.36.1
libxml2-python-debugsource - update to 2.7.6-0.77.36.1
libxml2 - update to 2.9.1-6.6.42
libxml2-utils (Ubuntu package) - addressed in versions 2.9.4+dfsg1-6.1ubuntu1.4, 2.9.10+dfsg-6.3ubuntu0.1, 2.9.10+dfsg-5ubuntu0.20.04.1, 2.9.10+dfsg-5ubuntu0.20.10.2
libxml2 (Ubuntu package) - addressed in versions 2.9.4+dfsg1-6.1ubuntu1.4, 2.9.10+dfsg-6.3ubuntu0.1, 2.9.10+dfsg-5ubuntu0.20.04.1, 2.9.10+dfsg-5ubuntu0.20.10.2
libxml2-2-32bit - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1, 2.9.7-3.31.1, 2.9.7-3.34.1
libxml2-tools - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1, 2.9.7-3.31.1, 2.9.7-3.34.1
libxml2-2-debuginfo - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1, 2.9.7-3.31.1, 2.9.7-3.34.1
libxml2-2 - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1, 2.9.7-3.31.1, 2.9.7-3.34.1
libxml2-tools-debuginfo - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1, 2.9.7-3.31.1, 2.9.7-3.34.1
python-libxml2 - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1
python-libxml2-debuginfo - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1
python-libxml2-debugsource - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1
libxml2-devel - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1, 2.9.7-3.31.1, 2.9.7-3.34.1
libxml2-2-debuginfo-32bit - addressed in versions 2.9.4-46.40.1, 2.9.4-46.43.1
libxml2-2-32bit-debuginfo - addressed in versions 2.9.7-3.31.1, 2.9.7-3.34.1
python-libxml2-python-debugsource - addressed in versions 2.9.7-3.31.1, 2.9.7-3.34.1
python2-libxml2-python - addressed in versions 2.9.7-3.31.1, 2.9.7-3.34.1
python2-libxml2-python-debuginfo - addressed in versions 2.9.7-3.31.1, 2.9.7-3.34.1
python3-libxml2-python - addressed in versions 2.9.7-3.31.1, 2.9.7-3.34.1
python3-libxml2-python-debuginfo - addressed in versions 2.9.7-3.31.1, 2.9.7-3.34.1
libxml2 (Red Hat package) - update to 2.9.7-9.el8_4.2
python3-libxml2 - update to 2.9.7-9.0.1
libxml2 - update to 2.9.7-9.0.1
libxml2-devel - update to 2.9.7-9.0.1
libxml2 - addressed in versions 2.9.10-12.fc34, 2.9.12-4.fc33
libxml2-help - update to 2.9.10-16
libxml2 - update to 2.9.10-16
libxml2-debugsource - update to 2.9.10-16
libxml2-debuginfo - update to 2.9.10-16
libxml2-devel - update to 2.9.10-16
python2-libxml2 - update to 2.9.10-16
python3-libxml2 - update to 2.9.10-16
SecurID Authentication Manager - update to 8.5 Patch 5
Brocade Fabric OS - addressed in versions 9.1.1d2, 9.2.0b1, 9.2.1
Dell Command | Update - update to 10.5.1.114
IBM Cognos Analytics - addressed in versions 11.1.7 Fix Pack 7, 11.2.4.1 IF1

• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/
• https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1954242
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/

• Multiple vulnerabilities in Libxml2
• Multiple vulnerabilities in cflinuxfs3
• Red Hat Enterprise Linux 8.4 update for libxml2
• Gentoo update for libxml2
• Multiple vulnerabilities in Apple macOS Big Sur
• Multiple vulnerabilities in Apple iOS and iPadOS
• Multiple vulnerabilities in Apple tvOS
• Multiple vulnerabilities in Apple watchOS
• Multiple vulnerabilities in Red Hat OpenShift Jaeger
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers
• Multiple vulnerabilities in Red Hat OpenShift Jaeger
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers
• Multiple vulnerabilities in Red Hat Web Terminal
• Multiple vulnerabilities in MySQL Workbench
• Multiple vulnerabilities in Hitachi Energy APM Edge
• Multiple vulnerabilities in IBM Security Verify Access
• Multiple vulnerabilities in Enterprise Manager Base Platform
• Multiple vulnerabilities in Red Hat JBoss Core Services
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Multiple vulnerabilities in PeopleSoft Enterprise PeopleTools
• SUSE update for libxml2
• SUSE update for libxml2
• SUSE update for libxml2
• SUSE update for libxml2
• SUSE update for libxml2
• Ubuntu update for libxml2
• Multiple vulnerabilities in Red Hat Service Telemetry Framework
• Multiple vulnerabilities in IBM Cloud Pak for Security
• Use-after-free in IBM InfoSphere Identity Insight
• ClevOS update for IBM Cloud Object Storage Systems
• Multiple vulnerabilities in Dell Command | Monitor
• Amazon Linux AMI update for libxml2
• Multiple vulnerabilities in IBM Cognos Analytics
• openEuler 20.03 LTS SP1 update for libxml2
• Multiple vulnerabilities in HPE Brocade Fabric OS
• IBM Integrated Analytics System update for libxml2
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Multiple vulnerabilities in OpenShift Virtualization 2.6
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Fedora 34 update for libxml2
• Fedora 33 update for libxml2
• Anolis OS update for libxml2
• SecurID Authentication Manager update for third-party components