CVE-2022-23308

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-23308
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://seclists.org/fulldisclosure/2022/May/33 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2022/May/34 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2022/May/35 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2022/May/36 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2022/May/37 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2022/May/38 Mailing List Third Party Advisory
https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e Patch Third Party Advisory
https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS Release Notes Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/
https://security.gentoo.org/glsa/202210-03 Third Party Advisory
https://security.netapp.com/advisory/ntap-20220331-0008/ Third Party Advisory
https://support.apple.com/kb/HT213253 Third Party Advisory
https://support.apple.com/kb/HT213254 Third Party Advisory
https://support.apple.com/kb/HT213255 Third Party Advisory
https://support.apple.com/kb/HT213256 Third Party Advisory
https://support.apple.com/kb/HT213257 Third Party Advisory
https://support.apple.com/kb/HT213258 Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

Configuration 15 (hide)

OR cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
History

07 Nov 2023, 03:44

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/', 'name': 'FEDORA-2022-050c712ed7', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/ -

02 Nov 2022, 13:18

Type Values Removed Values Added
CPE cpe:2.3:o:apple:macos:10.15.7:security_update_2022-001:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-007:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-006:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-004:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2022-003:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2020-001:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-002:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-008:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-005:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-003:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-001:*:*:*:*:*:*		 cpe:2.3:o:apple:mac_os_x:10.15.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*
First Time Apple mac Os X

28 Oct 2022, 20:49

Type Values Removed Values Added
References (N/A) https://www.oracle.com/security-alerts/cpujul2022.html - (N/A) https://www.oracle.com/security-alerts/cpujul2022.html - Patch, Third Party Advisory
References (GENTOO) https://security.gentoo.org/glsa/202210-03 - (GENTOO) https://security.gentoo.org/glsa/202210-03 - Third Party Advisory
CPE cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0:*:*:*:*:*:*:*
First Time Oracle mysql Workbench
Oracle communications Cloud Native Core Unified Data Repository
Oracle communications Cloud Native Core Network Function Cloud Native Environment
Oracle communications Cloud Native Core Network Repository Function
Oracle communications Cloud Native Core Binding Support Function
Oracle zfs Storage Appliance Kit
Oracle
Oracle communications Cloud Native Core Network Slice Selection Function

16 Oct 2022, 17:15

Type Values Removed Values Added
References
  • (GENTOO) https://security.gentoo.org/glsa/202210-03 -

25 Jul 2022, 18:21

Type Values Removed Values Added
References
  • (N/A) https://www.oracle.com/security-alerts/cpujul2022.html -

03 Jun 2022, 16:55

Type Values Removed Values Added
CPE cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-002:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-003:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-001:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-004:*:*:*:*:*:*
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-008:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-007:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:*:*:*:*:*:*:*
cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2022-001:*:*:*:*:*:*
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-005:*:*:*:*:*:*
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2022-003:*:*:*:*:*:*
cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2020-001:*:*:*:*:*:*
cpe:2.3:o:apple:macos:10.15.7:security_update_2021-006:*:*:*:*:*:*
cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*
First Time Apple tvos
Fedoraproject fedora
Netapp h300e Firmware
Netapp h410s Firmware
Netapp
Debian debian Linux
Netapp h500s Firmware
Apple watchos
Netapp h500e Firmware
Netapp snapmanager
Fedoraproject
Netapp h300e
Netapp h700e Firmware
Apple
Netapp h300s Firmware
Netapp bootstrap Os
Netapp h700s Firmware
Netapp h500s
Netapp h500e
Netapp h300s
Netapp h410s
Netapp hci Compute Node
Netapp snapdrive
Netapp ontap Select Deploy Administration Utility
Netapp manageability Software Development Kit
Apple ipados
Netapp solidfire \& Hci Management Node
Netapp solidfire\, Enterprise Sds \& Hci Storage Node
Netapp h410c Firmware
Netapp smi-s Provider
Netapp h700s
Netapp clustered Data Ontap Antivirus Connector
Netapp clustered Data Ontap
Netapp h700e
Apple iphone Os
Debian
Netapp h410c
Apple macos
Netapp active Iq Unified Manager
References (FULLDISC) http://seclists.org/fulldisclosure/2022/May/37 - (FULLDISC) http://seclists.org/fulldisclosure/2022/May/37 - Mailing List, Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT213258 - (CONFIRM) https://support.apple.com/kb/HT213258 - Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2022/May/36 - (FULLDISC) http://seclists.org/fulldisclosure/2022/May/36 - Mailing List, Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2022/May/38 - (FULLDISC) http://seclists.org/fulldisclosure/2022/May/38 - Mailing List, Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/ - Mailing List, Third Party Advisory
References (CONFIRM) https://security.netapp.com/advisory/ntap-20220331-0008/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20220331-0008/ - Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT213256 - (CONFIRM) https://support.apple.com/kb/HT213256 - Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT213257 - (CONFIRM) https://support.apple.com/kb/HT213257 - Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT213254 - (CONFIRM) https://support.apple.com/kb/HT213254 - Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2022/May/33 - (FULLDISC) http://seclists.org/fulldisclosure/2022/May/33 - Mailing List, Third Party Advisory
References (MLIST) https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html - (MLIST) https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html - Mailing List, Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2022/May/35 - (FULLDISC) http://seclists.org/fulldisclosure/2022/May/35 - Mailing List, Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT213253 - (CONFIRM) https://support.apple.com/kb/HT213253 - Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT213255 - (CONFIRM) https://support.apple.com/kb/HT213255 - Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2022/May/34 - (FULLDISC) http://seclists.org/fulldisclosure/2022/May/34 - Mailing List, Third Party Advisory

17 May 2022, 07:15

Type Values Removed Values Added
References
  • (FULLDISC) http://seclists.org/fulldisclosure/2022/May/37 -
  • (FULLDISC) http://seclists.org/fulldisclosure/2022/May/36 -
  • (FULLDISC) http://seclists.org/fulldisclosure/2022/May/38 -
  • (FULLDISC) http://seclists.org/fulldisclosure/2022/May/33 -
  • (FULLDISC) http://seclists.org/fulldisclosure/2022/May/35 -
  • (FULLDISC) http://seclists.org/fulldisclosure/2022/May/34 -

16 May 2022, 22:15

Type Values Removed Values Added
References
  • (CONFIRM) https://support.apple.com/kb/HT213254 -

16 May 2022, 20:15

Type Values Removed Values Added
References
  • (CONFIRM) https://support.apple.com/kb/HT213258 -
  • (CONFIRM) https://support.apple.com/kb/HT213256 -
  • (CONFIRM) https://support.apple.com/kb/HT213257 -
  • (CONFIRM) https://support.apple.com/kb/HT213253 -
  • (CONFIRM) https://support.apple.com/kb/HT213255 -

08 Apr 2022, 23:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html -

31 Mar 2022, 09:15

Type Values Removed Values Added
References
  • (CONFIRM) https://security.netapp.com/advisory/ntap-20220331-0008/ -

10 Mar 2022, 17:45

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/ -

08 Mar 2022, 18:53

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : 4.3
v3 : 7.5
First Time Xmlsoft
Xmlsoft libxml2
CPE cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*
CWE CWE-416
References (MISC) https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS - (MISC) https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS - Release Notes, Third Party Advisory
References (CONFIRM) https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e - (CONFIRM) https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e - Patch, Third Party Advisory

26 Feb 2022, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-02-26 05:15

Updated : 2023-12-10 14:22

NVD link : CVE-2022-23308

Mitre link : CVE-2022-23308

CVE.ORG link : CVE-2022-23308

JSON object : View

Products Affected

netapp

  • h700s_firmware
  • manageability_software_development_kit
  • h410s
  • snapmanager
  • h500e_firmware
  • solidfire_\&_hci_management_node
  • h500e
  • solidfire\,_enterprise_sds_\&_hci_storage_node
  • smi-s_provider
  • h700e_firmware
  • h300s
  • clustered_data_ontap_antivirus_connector
  • h700s
  • h300e
  • hci_compute_node
  • h700e
  • h410s_firmware
  • h500s
  • clustered_data_ontap
  • bootstrap_os
  • h300s_firmware
  • h410c
  • active_iq_unified_manager
  • ontap_select_deploy_administration_utility
  • h500s_firmware
  • h300e_firmware
  • h410c_firmware
  • snapdrive

oracle

  • mysql_workbench
  • zfs_storage_appliance_kit
  • communications_cloud_native_core_network_function_cloud_native_environment
  • communications_cloud_native_core_binding_support_function
  • communications_cloud_native_core_network_slice_selection_function
  • communications_cloud_native_core_network_repository_function
  • communications_cloud_native_core_unified_data_repository

xmlsoft

  • libxml2

debian

  • debian_linux

apple

  • iphone_os
  • macos
  • tvos
  • mac_os_x
  • ipados
  • watchos

fedoraproject

  • fedora
CWE
CWE-416

Use After Free