← Back

CVE-2022-23308

nvd nist
Published: Feb 26, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Affected (49)

Products: Xmlsoft: Libxml2 · Fedoraproject: Fedora · Debian: Debian Linux · +3 more
Show all products
Xmlsoft: Libxml2 · Fedoraproject: Fedora · Debian: Debian Linux · Apple: Ipados, Iphone Os, Mac Os X, Macos, Tvos, Watchos · Netapp: Active Iq Unified Manager, Clustered Data Ontap, Clustered Data Ontap Antivirus Connector, Manageability Software Development Kit, Ontap Select Deploy Administration Utility, Smi S Provider, Snapdrive, Snapmanager, Solidfire, Enterprise Sds & Hci Storage Node, Solidfire & Hci Management Node, Bootstrap Os, H300s Firmware, H500s Firmware, H700s Firmware, H300e Firmware, H500e Firmware, H700e Firmware, H410s Firmware, H410c Firmware · Oracle: Communications Cloud Native Core Binding Support Function, Communications Cloud Native Core Network Function Cloud Native Environment, Communications Cloud Native Core Network Repository Function, Communications Cloud Native Core Network Slice Selection Function, Communications Cloud Native Core Unified Data Repository, Mysql Workbench, Zfs Storage Appliance Kit
Xmlsoft
1 product
Libxml2
Fedoraproject
1 product
Fedora
Debian
1 product
Debian Linux
Apple
6 products
Ipados
Iphone Os
Mac Os X
Macos
Tvos
Watchos
Netapp
19 products
Active Iq Unified Manager
Clustered Data Ontap
Clustered Data Ontap Antivirus Connector
Manageability Software Development Kit
Ontap Select Deploy Administration Utility
Smi S Provider
Snapdrive
Snapmanager
Solidfire, Enterprise Sds & Hci Storage Node
Solidfire & Hci Management Node
Bootstrap Os
H300s Firmware
H500s Firmware
H700s Firmware
H300e Firmware
H500e Firmware
H700e Firmware
H410s Firmware
H410c Firmware
Oracle
7 products
Communications Cloud Native Core Binding Support Function
Communications Cloud Native Core Network Function Cloud Native Environment
Communications Cloud Native Core Network Repository Function
Communications Cloud Native Core Network Slice Selection Function
Communications Cloud Native Core Unified Data Repository
Mysql Workbench
Zfs Storage Appliance Kit
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Libxml2
Before 2.9.13
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 34
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration D
19 vulnerable
Vulnerable SoftwareAffected Versions
Ipados
Before 15.5
Iphone Os
Before 15.5
Apple
Mac Os X
From 10.15.0 to 10.15.7
Mac Os X
Version 10.15.7
Mac Os X
Version 10.15.7 security_update_2020-001
Mac Os X
Version 10.15.7 security_update_2021-001
Mac Os X
Version 10.15.7 security_update_2021-002
Mac Os X
Version 10.15.7 security_update_2021-003
Mac Os X
Version 10.15.7 security_update_2021-004
Mac Os X
Version 10.15.7 security_update_2021-005
Mac Os X
Version 10.15.7 security_update_2021-006
Mac Os X
Version 10.15.7 security_update_2021-007
Mac Os X
Version 10.15.7 security_update_2021-008
Mac Os X
Version 10.15.7 security_update_2022-001
Mac Os X
Version 10.15.7 security_update_2022-003
Apple
Macos
From 11.6.0 to 11.6.6
Macos
From 12.0 to 12.4
Tvos
Before 15.5
Watchos
Before 8.6
Configuration E
10 vulnerable
Vulnerable SoftwareAffected Versions
Active Iq Unified Manager
All versions
Clustered Data Ontap
All versions
Clustered Data Ontap Antivirus Connector
All versions
Manageability Software Development Kit
All versions
Ontap Select Deploy Administration Utility
All versions
Smi S Provider
All versions
Snapdrive
All versions
Snapmanager
All versions
Solidfire, Enterprise Sds & Hci Storage Node
All versions
Solidfire & Hci Management Node
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bootstrap Os
All versions
Running on/withPlatform Versions
Netapp
Hci Compute Node
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300s Firmware
All versions
Running on/withPlatform Versions
Netapp
H300s
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500s Firmware
All versions
Running on/withPlatform Versions
Netapp
H500s
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700s Firmware
All versions
Running on/withPlatform Versions
Netapp
H700s
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300e Firmware
All versions
Running on/withPlatform Versions
Netapp
H300e
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500e Firmware
All versions
Running on/withPlatform Versions
Netapp
H500e
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700e Firmware
All versions
Running on/withPlatform Versions
Netapp
H700e
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410s Firmware
All versions
Running on/withPlatform Versions
Netapp
H410s
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410c Firmware
All versions
Running on/withPlatform Versions
Netapp
H410c
All versions
Configuration O
8 vulnerable
Vulnerable SoftwareAffected Versions
Communications Cloud Native Core Binding Support Function
Version 22.2.0
Communications Cloud Native Core Network Function Cloud Native Environment
Version 22.1.0
Oracle
Communications Cloud Native Core Network Repository Function
Version 22.1.2
Communications Cloud Native Core Network Repository Function
Version 22.2.0
Communications Cloud Native Core Network Slice Selection Function
Version 22.1.1
Communications Cloud Native Core Unified Data Repository
Version 22.2.0
Mysql Workbench
Up to 8.0.29
Zfs Storage Appliance Kit
Version 8.8

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (38)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Release NotesThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.