CVE-2021-3517

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.11 Nokogiri versions prior to 1.11.4

Description The issue is related to a flaw in the xml entity encoding functionality, which could trigger an out-of-bounds read if a crafted file is processed by an application linked with the affected functionality. This could impact application availability, with potential effects on confidentiality and integrity if an attacker uses memory information to further exploit the application.

Recommendations For libxml2 versions prior to 2.9.11, update to version 2.9.11 or later to address the issue. For Nokogiri versions prior to 1.11.4, update to version 1.11.4 or later, which includes an updated version of libxml2 that addresses this vulnerability.