CVE-2011-2821
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote...
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
Exploit likelihood
What each source reports
NVD Score used
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
- Record
CVE-2011-2821- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-415
- Updated
- 2026-11-02
CVE List No score
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
- Record
CVE-2011-2821- Updated
- 2026-11-02
EUVDEUVD-2011-2795 No score
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
- Record
EUVD-2011-2795- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mx3h-88ww-4mqq No score
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote...
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
- Record
GHSA-mx3h-88ww-4mqq- Weakness
- CWE-415
- Updated
- 2026-11-02
OSV No score
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
- Record
CVE-2011-2821- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-2821 No score
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
- Record
DEBIAN-CVE-2011-2821- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libxml2Debian:12 |
before 2.7.8.dfsg-5 | 2.7.8.dfsg-5 |
libxml2Debian:13 |
before 2.7.8.dfsg-5 | 2.7.8.dfsg-5 |
libxml2Debian:14 |
before 2.7.8.dfsg-5 | 2.7.8.dfsg-5 |
libxml2Debian:6.0 |
before 2.7.8.dfsg-2+squeeze2, plus listed versions 2.7.8.dfsg-22.7.8.dfsg-2+squeeze1 |
2.7.8.dfsg-2+squeeze2 |
libxml2Debian:5.0 |
before 2.6.32.dfsg-5+lenny5, plus listed versions 2.6.32.dfsg-52.6.32.dfsg-5+lenny12.6.32.dfsg-5+lenny22.6.32.dfsg-5+lenny32.6.32.dfsg-5+lenny4 |
2.6.32.dfsg-5+lenny5 |
libxml2Red Hat:enterprise_linux:6::client |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-develRed Hat:enterprise_linux:6::client |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-staticRed Hat:enterprise_linux:6::client |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-pythonRed Hat:enterprise_linux:6::client |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libxml2Red Hat:enterprise_linux:6::computenode |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-develRed Hat:enterprise_linux:6::computenode |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-staticRed Hat:enterprise_linux:6::computenode |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-pythonRed Hat:enterprise_linux:6::computenode |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2Red Hat:enterprise_linux:6::server |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-staticRed Hat:enterprise_linux:6::server |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-develRed Hat:enterprise_linux:6::server |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-pythonRed Hat:enterprise_linux:6::server |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2Red Hat:enterprise_linux:6::workstation |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-staticRed Hat:enterprise_linux:6::workstation |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-develRed Hat:enterprise_linux:6::workstation |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-pythonRed Hat:enterprise_linux:6::workstation |
before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
mingw32-libxml2Red Hat:enterprise_linux:6::client |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-staticRed Hat:enterprise_linux:6::client |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2Red Hat:enterprise_linux:6::computenode |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-staticRed Hat:enterprise_linux:6::computenode |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2Red Hat:enterprise_linux:6::server |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-staticRed Hat:enterprise_linux:6::server |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2Red Hat:enterprise_linux:6::workstation |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-staticRed Hat:enterprise_linux:6::workstation |
before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2821 is a high vulnerability (CVSS 7.5) in Google Chrome, published August 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.69%, the 77th percentile. Fixed in libxml2 2.7.8.dfsg-5.
References
mandriva.com/security/advisories?name=MDVSA-2011:145
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
support.apple.com/kb/HT5503
rhn.redhat.com/errata/RHSA-2013-0217.html
redhat.com/support/errata/RHSA-2011-1749.html
Show 58 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13840
code.google.com/p/chromium/issues/detail?id=89402
googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html
debian.org/security/2012/dsa-2394
nvd.nist.gov/vuln/detail/CVE-2011-2821
github.com/advisories/GHSA-mx3h-88ww-4mqq
security-tracker.debian.org/tracker/CVE-2011-2821
access.redhat.com/errata/RHSA-2011:1749
bugzilla.redhat.com/show_bug.cgi?id=645341
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1749.json
cve.org/CVERecord?id=CVE-2010-4008