CVE-2022-40303

Published: Nov 23, 2022Modified: Oct 14, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Affected (18)

Products: Xmlsoft: Libxml2 · Netapp: Active Iq Unified Manager, Clustered Data Ontap, Clustered Data Ontap Antivirus Connector, Netapp Manageability Sdk, Ontap Select Deploy Administration Utility, Snapmanager, H300s Firmware, H500s Firmware, H700s Firmware, H410s Firmware, H410c Firmware · Apple: Ipados, Iphone Os, Macos, Tvos, Watchos

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxml2	version < 2.10.3

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Clustered Data Ontap	All versions
Netapp Clustered Data Ontap Antivirus Connector	All versions
Netapp Netapp Manageability Sdk	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Snapmanager	All versions

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	version < 15.7.2
Apple Iphone Os	version < 15.7.2
Apple Macos	11.0 ≤ version < 11.7.2
Apple Macos	12.0 ≤ version < 12.6.2
Apple Tvos	version < 16.2
Apple Watchos	version < 9.2

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (32)

http://seclists.org/fulldisclosure/2022/Dec/21

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/24

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/25

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/26

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/27

Source: cve@mitre.org

https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0

Source: cve@mitre.org

PatchThird Party Advisory

https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3

Source: cve@mitre.org

Release NotesThird Party Advisory

https://security.netapp.com/advisory/ntap-20221209-0003/

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT213531

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT213533

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT213534

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT213535

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT213536

Source: cve@mitre.org

Third Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/21

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/24

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/25

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/26

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/27

Source: af854a3a-2127-422b-91ae-364da2661108

https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://security.netapp.com/advisory/ntap-20221209-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT213531

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT213533

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT213534

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT213535

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT213536

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cert-portal.siemens.com/productcert/html/ssa-337522.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

https://cert-portal.siemens.com/productcert/html/ssa-341067.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

https://cert-portal.siemens.com/productcert/html/ssa-556635.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

https://cert-portal.siemens.com/productcert/html/ssa-625862.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

https://cert-portal.siemens.com/productcert/html/ssa-769027.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.