Home

CVE-2021-3541

Description

A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.056

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-2-2.9.4-46.46.1.x86_64.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-2-32bit-2.9.4-46.46.1.x86_64.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-2-debuginfo-2.9.4-46.46.1.x86_64.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-2-debuginfo-32bit-2.9.4-46.46.1.x86_64.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-debugsource-2.9.4-46.46.1.x86_64.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-doc-2.9.4-46.46.1.noarch.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-tools-2.9.4-46.46.1.x86_64.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) libxml2-tools-debuginfo-2.9.4-46.46.1.x86_64.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) python-libxml2-2.9.4-46.46.1.x86_64.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) python-libxml2-debuginfo-2.9.4-46.46.1.x86_64.rpmLinux
SUSE-SU-2021:2016-1(SUSE Linux Enterprise Server 12-SP5 ) python-libxml2-debugsource-2.9.4-46.46.1.x86_64.rpmLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-6.3ubuntu0.1_i386.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-6.3ubuntu0.1_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.4+dfsg1-6.1ubuntu1.4_i386.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.4+dfsg1-6.1ubuntu1.4_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-5ubuntu0.20.04.1_i386.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-5ubuntu0.20.04.1_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-5ubuntu0.20.10.2_i386.debLinux
GNOME XML library (USN-4991-1) libxml2_2.9.10+dfsg-5ubuntu0.20.10.2_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-6.3ubuntu0.1_i386.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-6.3ubuntu0.1_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.4+dfsg1-6.1ubuntu1.4_i386.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.4+dfsg1-6.1ubuntu1.4_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.1_i386.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.1_amd64.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-5ubuntu0.20.10.2_i386.debLinux
GNOME XML library (USN-4991-1) libxml2-utils_2.9.10+dfsg-5ubuntu0.20.10.2_amd64.debLinux
Libxml2 update (ELSA-2021-2569) libxml2-2.9.7-9.0.1.el8_4.2.i686.rpmLinux
Libxml2 update (ELSA-2021-2569) libxml2-2.9.7-9.0.1.el8_4.2.x86_64.rpmLinux
Libxml2-devel update (ELSA-2021-2569) libxml2-devel-2.9.7-9.0.1.el8_4.2.i686.rpmLinux
Libxml2-devel update (ELSA-2021-2569) libxml2-devel-2.9.7-9.0.1.el8_4.2.x86_64.rpmLinux
Python3-libxml2 update (ELSA-2021-2569) python3-libxml2-2.9.7-9.0.1.el8_4.2.x86_64.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-2.9.7-9.el8_4.2.i686.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-2.9.7-9.el8_4.2.x86_64.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-debugsource-2.9.7-9.el8_4.2.i686.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-debugsource-2.9.7-9.el8_4.2.x86_64.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-devel-2.9.7-9.el8_4.2.i686.rpmLinux
(RHSA-2021:2569) libxml2 security update libxml2-devel-2.9.7-9.el8_4.2.x86_64.rpmLinux
(RHSA-2021:2569) libxml2 security update python3-libxml2-2.9.7-9.el8_4.2.x86_64.rpmLinux
Libxml2 update (ELSA-2022-0899) libxml2-2.9.7-12.el8_5.i686.rpmLinux
Libxml2 update (ELSA-2022-0899) libxml2-2.9.7-12.el8_5.x86_64.rpmLinux
Libxml2-devel update (ELSA-2022-0899) libxml2-devel-2.9.7-12.el8_5.i686.rpmLinux
Libxml2-devel update (ELSA-2022-0899) libxml2-devel-2.9.7-12.el8_5.x86_64.rpmLinux
Python3-libxml2 update (ELSA-2022-0899) python3-libxml2-2.9.7-12.el8_5.x86_64.rpmLinux
SUSE-SU-2023:2491-1(Legacy Module 15-SP4 ) java-1_8_0-ibm-1.8.0_sr8.5-150000.3.74.1.x86_64.rpmLinux
SUSE-SU-2023:2491-1(Legacy Module 15-SP4 ) java-1_8_0-ibm-alsa-1.8.0_sr8.5-150000.3.74.1.x86_64.rpmLinux
SUSE-SU-2023:2491-1(Legacy Module 15-SP4 ) java-1_8_0-ibm-devel-1.8.0_sr8.5-150000.3.74.1.x86_64.rpmLinux
SUSE-SU-2023:2491-1(Legacy Module 15-SP4 ) java-1_8_0-ibm-plugin-1.8.0_sr8.5-150000.3.74.1.x86_64.rpmLinux
SUSE-SU-2023:2491-1(Legacy Module 15-SP5 ) java-1_8_0-ibm-1.8.0_sr8.5-150000.3.74.1.x86_64_15_SP5.rpmLinux
SUSE-SU-2023:2491-1(Legacy Module 15-SP5 ) java-1_8_0-ibm-alsa-1.8.0_sr8.5-150000.3.74.1.x86_64_15_SP5.rpmLinux
SUSE-SU-2023:2491-1(Legacy Module 15-SP5 ) java-1_8_0-ibm-devel-1.8.0_sr8.5-150000.3.74.1.x86_64_15_SP5.rpmLinux
SUSE-SU-2023:2491-1(Legacy Module 15-SP5 ) java-1_8_0-ibm-plugin-1.8.0_sr8.5-150000.3.74.1.x86_64_15_SP5.rpmLinux
SUSE-SU-2023:4614-1(SUSE Linux Enterprise Server 12 SP5 ) java-1_8_0-ibm-1.8.0_sr8.15-30.117.1.x86_64.rpmLinux
SUSE-SU-2023:4614-1(SUSE Linux Enterprise Server 12 SP5 ) java-1_8_0-ibm-alsa-1.8.0_sr8.15-30.117.1.x86_64.rpmLinux
SUSE-SU-2023:4614-1(SUSE Linux Enterprise Server 12 SP5 ) java-1_8_0-ibm-devel-1.8.0_sr8.15-30.117.1.x86_64.rpmLinux
SUSE-SU-2023:4614-1(SUSE Linux Enterprise Server 12 SP5 ) java-1_8_0-ibm-plugin-1.8.0_sr8.15-30.117.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234