RHSA-2021:2569MediumCVSS 8.6

Red Hat Security Advisory: libxml2 security update

Published
June 29, 2021
Last Modified
June 25, 2026

🔗 CVE IDs covered (5)

CVE-2021-3516 →CVE-2021-3517 →CVE-2021-3518 →CVE-2021-3537 →CVE-2021-3541 →

📋 Description

CVE-2021-3516 — libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c CVE-2021-3517 — libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c CVE-2021-3518 — libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c CVE-2021-3537 — libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode CVE-2021-3541 — libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms

🔗 References (8)