There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.
NOTE: The following CVSS v3.0 metrics and score provided are preliminary and subject to review.
|Base Score:||Base Metrics:|
|Access Vector:||Undefined||Attack Complexity:||Undefined|
|Privileges Required:||None||User Interaction:||None|
|Integrity Impact:||Undefined||Availability Impact:||Undefined|
|Oracle Linux version 8 (libxml2)||ELSA-2021-2569||2021-07-03|
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team