一、漏洞信息

漏洞编号：[CVE-2021-3518](https://nvd.nist.gov/vuln/detail/CVE-2021-3518)

漏洞归属组件：libxml2

漏洞归属的版本：2.9.9,2.9.8,2.9.10

CVSS V3.0分值：

BaseScore：8.8 High

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

漏洞简述：

There s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

漏洞创建时间：2021-05-26 13:30:29

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-3518

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/doc/md/manual.md

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

一、漏洞信息

漏洞编号：[CVE-2021-3518](https://nvd.nist.gov/vuln/detail/CVE-2021-3518)

漏洞归属组件：libxml2

漏洞归属的版本：2.9.9,2.9.8,2.9.10

CVSS V3.0分值：

BaseScore：8.8 High

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

漏洞简述：

There s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

漏洞公开时间：2021-05-18

漏洞创建时间：2021-05-26 13:30:29

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-3518

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/doc/md/manual.md

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

8.8

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS(2.9.10):

2.openEuler-20.03-LTS-SP1(2.9.10):

一、漏洞信息

漏洞编号：[CVE-2021-3518](https://nvd.nist.gov/vuln/detail/CVE-2021-3518)

漏洞归属组件：libxml2

漏洞归属的版本：2.9.9,2.9.8,2.9.10

CVSS V3.0分值：

BaseScore：8.8 High

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

漏洞简述：

There s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

漏洞公开时间：2021-05-18

漏洞创建时间：2021-05-26 13:30:29

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-3518

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/doc/md/manual.md

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

8.8

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

受影响版本排查(受影响/不受影响)：

一、漏洞信息

漏洞编号：[CVE-2021-3518](https://nvd.nist.gov/vuln/detail/CVE-2021-3518)

漏洞归属组件：libxml2

漏洞归属的版本：2.9.9,2.9.8,2.9.10

CVSS V3.0分值：

BaseScore：8.8 High

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

漏洞简述：

There s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

漏洞创建时间：2021-05-26 13:30:29

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-3518

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/doc/md/manual.md

二、漏洞分析结构反馈

影响性分析说明：

在2.9.11之前的版本中，攻击者通过提供一个由libxml2的受影响功能链接的应用程序处理的特制文件，造成释放后使用，影响机密性，完整性和可用性。

openEuler评分：

8.8

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS(2.9.10):受影响

2.openEuler-20.03-LTS-SP1(2.9.10):受影响

3.openEuler-21.03(2.9.10):受影响

4.openEuler-20.03-LTS-Next(2.9.10):受影响

5.openEuler-20.03-LTS-SP2(2.9.10):受影响

6.master(2.9.10):受影响

2.openEuler-20.03-LTS-SP1(2.9.10):否

一、漏洞信息

漏洞编号：[CVE-2021-3518](https://nvd.nist.gov/vuln/detail/CVE-2021-3518)

CVSS V3.0分值：

BaseScore：8.8 High

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

漏洞简述：

There s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

漏洞创建时间：2021-05-26 13:30:29

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-3518