2 lines
12 KiB
JSON
2 lines
12 KiB
JSON
{"affected":[{"affectedData":[{"product":"libxml2","vendor":"n/a","versions":[{"status":"affected","version":"libxml2 2.9.11"}]}],"source":"secalert@redhat.com"},{"affectedData":[{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]}],"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","matchCriteriaId":"208AF535-5D38-45B4-B227-2892611C5A20","versionEndExcluding":"2.9.11","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*","matchCriteriaId":"9B453CF7-9AA6-4B94-A003-BF7AE0B82F53","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"F4CFF558-3C47-480D-A2F0-BABF26042943","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*","matchCriteriaId":"E460AA51-FCDA-46B9-AE97-E6676AA5E194","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","matchCriteriaId":"A930E247-0B43-43CB-98FF-6CE7B8189835","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","matchCriteriaId":"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*","matchCriteriaId":"D39DCAE7-494F-40B2-867F-6C6A077939DD","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*","matchCriteriaId":"E7CF3019-975D-40BB-A8A4-894E62BD3797","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:windows:*:*","matchCriteriaId":"BEDE62C6-D571-4AF8-B85E-CBBCE4AF98B5","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:netapp:hci_h410c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"08C564D8-E21F-403C-B4BB-7B14B7FB5DAE","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:netapp:hci_h410c:-:*:*:*:*:*:*:*","matchCriteriaId":"8532F5F0-00A1-4FA9-A80B-09E46D03F74F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"C2A5B24D-BDF2-423C-98EA-A40778C01A05","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6E8758C8-87D3-450A-878B-86CE8C9FC140","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B095CC03-7077-4A58-AB25-CC5380CDCE5A","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*","matchCriteriaId":"EED6C8C2-F986-4CFD-A343-AD2340F850F2","versionEndIncluding":"8.0.26","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:real_user_experience_insight:13.4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CADD7026-EF85-40A5-8563-7A34C6941B1F","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:real_user_experience_insight:13.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"58F019E8-F68D-41B5-9480-0A81616F2E7C","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability."},{"lang":"es","value":"Se presenta un fallo en libxml2 en versiones anteriores a 2.9.11. Un atacante que pueda enviar un archivo diseñado para que sea procesado por una aplicación vinculada con libxml2 podría desencadenar un uso de la memoria previamente liberada. El mayor impacto de este fallo es a la confidencialidad, integridad y disponibilidad"}],"id":"CVE-2021-3518","lastModified":"2026-10-14T10:17:44.110","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":6.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-05-18T12:15:08.043","references":[{"source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Jul/54"},{"source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Jul/55"},{"source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Jul/58"},{"source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Jul/59"},{"source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954242"},{"source":"secalert@redhat.com","url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"},{"source":"secalert@redhat.com","url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"},{"source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html"},{"source":"secalert@redhat.com","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/"},{"source":"secalert@redhat.com","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202107-05"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20210625-0002/"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://support.apple.com/kb/HT212601"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://support.apple.com/kb/HT212602"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://support.apple.com/kb/HT212604"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://support.apple.com/kb/HT212605"},{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"source":"secalert@redhat.com","tags":["Not Applicable"],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"},{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Jul/54"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Jul/55"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Jul/58"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Jul/59"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954242"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202107-05"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20210625-0002/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://support.apple.com/kb/HT212601"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://support.apple.com/kb/HT212602"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://support.apple.com/kb/HT212604"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://support.apple.com/kb/HT212605"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-416"}],"source":"nvd@nist.gov","type":"Primary"}]}
|