CVE-2022-29824

Published: May 3, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.

Affected (23)

Products: Xmlsoft: Libxml2, Libxslt · Fedoraproject: Fedora · Debian: Debian Linux · +2 more

Show all products

2 products

1 product

1 product

14 products

Active Iq Unified Manager

Clustered Data Ontap

Clustered Data Ontap Antivirus Connector

Manageability Software Development Kit

Ontap Select Deploy Administration Utility

Solidfire & Hci Management Node

1 product

Zfs Storage Appliance Kit

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxml2	Before 2.9.14
Xmlsoft Libxslt	Up to 1.1.35

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35
Fedoraproject Fedora	Version 36

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 9.0

Configuration D

9 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Clustered Data Ontap	All versions
Netapp Clustered Data Ontap Antivirus Connector	All versions
Netapp Manageability Software Development Kit	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Smi S Provider	All versions
Netapp Snapdrive	All versions
Netapp Snapmanager	All versions
Netapp Solidfire & Hci Management Node	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Zfs Storage Appliance Kit	Version 8.8

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (28)

http://packetstormsecurity.com/files/167345/libxml2-xmlBufAdd-Heap-Buffer-Overflow.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/169825/libxml2-xmlParseNameComplex-Integer-Overflow.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab

Source: cve@mitre.org

PatchThird Party Advisory

https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd

Source: cve@mitre.org

PatchThird Party Advisory

https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14

Source: cve@mitre.org

Release NotesThird Party Advisory

https://gitlab.gnome.org/GNOME/libxslt/-/tags

Source: cve@mitre.org

ProductThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/

Source: cve@mitre.org

https://security.gentoo.org/glsa/202210-03

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220715-0006/

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2022/dsa-5142

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: cve@mitre.org

PatchThird Party Advisory

http://packetstormsecurity.com/files/167345/libxml2-xmlBufAdd-Heap-Buffer-Overflow.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/169825/libxml2-xmlParseNameComplex-Integer-Overflow.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://gitlab.gnome.org/GNOME/libxslt/-/tags

Source: af854a3a-2127-422b-91ae-364da2661108

ProductThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202210-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220715-0006/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2022/dsa-5142

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.