IM
IronMonkey Threat Research

CVE-2022-23308 HIGH

Published: 2022-02-26 | Last Modified: 2025-05-05 | Status: Modified

Description

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Additional Descriptions (1)

El archivo valid.c en libxml2 versiones anteriores a 2.9.13, presenta un uso de memoria previamente liberada de los atributos ID e IDREF.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 4.3 (MEDIUM)

AV:N/AC:M/Au:N/C:N/I:N/A:P

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-416
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-416

Affected Products

Vendor Product Version Update Type
xmlsoft libxml2 * <built-in method update of dict object at 0x7fd384ab7800> Application
fedoraproject fedora 34 <built-in method update of dict object at 0x7fd384ab7940> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd36865fd40> Operating System
apple ipados * <built-in method update of dict object at 0x7fd341254980> Operating System
apple iphone_os * <built-in method update of dict object at 0x7fd31b234ac0> Operating System
apple mac_os_x * <built-in method update of dict object at 0x7fd31b235c80> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd36865dd00> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd2d39fdfc0> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd36865fe40> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd31b236280> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd36865f780> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd384ab73c0> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd384120a80> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd384aa22c0> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd369405380> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd348dadf00> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd31b234580> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd36865c5c0> Operating System
apple macos * <built-in method update of dict object at 0x7fd36865ed80> Operating System
apple macos * <built-in method update of dict object at 0x7fd3412577c0> Operating System
apple tvos * <built-in method update of dict object at 0x7fd3694079c0> Operating System
apple watchos * <built-in method update of dict object at 0x7fd384ab5980> Operating System
netapp active_iq_unified_manager - <built-in method update of dict object at 0x7fd36ada2b00> Application
netapp clustered_data_ontap - <built-in method update of dict object at 0x7fd36865e040> Application
netapp clustered_data_ontap_antivirus_connector - <built-in method update of dict object at 0x7fd36ad4cc80> Application
netapp manageability_software_development_kit - <built-in method update of dict object at 0x7fd341257540> Application
netapp ontap_select_deploy_administration_utility - <built-in method update of dict object at 0x7fd31b236140> Application
netapp smi-s_provider - <built-in method update of dict object at 0x7fd36865ca80> Application
netapp snapdrive - <built-in method update of dict object at 0x7fd369d6d400> Application
netapp snapmanager - <built-in method update of dict object at 0x7fd36ad4ca80> Application
netapp solidfire\,_enterprise_sds_\&_hci_storage_node - <built-in method update of dict object at 0x7fd3841234c0> Application
netapp solidfire_\&_hci_management_node - <built-in method update of dict object at 0x7fd369d6c1c0> Application
netapp bootstrap_os - <built-in method update of dict object at 0x7fd36ad4d0c0> Operating System
netapp h300s_firmware - <built-in method update of dict object at 0x7fd36ad4cd40> Operating System
netapp h500s_firmware - <built-in method update of dict object at 0x7fd384e13300> Operating System
netapp h700s_firmware - <built-in method update of dict object at 0x7fd36865dd40> Operating System
netapp h300e_firmware - <built-in method update of dict object at 0x7fd369d6c2c0> Operating System
netapp h500e_firmware - <built-in method update of dict object at 0x7fd36b154ac0> Operating System
netapp h700e_firmware - <built-in method update of dict object at 0x7fd384e13d80> Operating System
netapp h410s_firmware - <built-in method update of dict object at 0x7fd36865fc80> Operating System
netapp h410c_firmware - <built-in method update of dict object at 0x7fd2a0507c00> Operating System
oracle communications_cloud_native_core_binding_support_function 22.2.0 <built-in method update of dict object at 0x7fd319dd7b00> Application
oracle communications_cloud_native_core_network_function_cloud_native_environment 22.1.0 <built-in method update of dict object at 0x7fd36865de00> Application
oracle communications_cloud_native_core_network_repository_function 22.1.2 <built-in method update of dict object at 0x7fd36041f940> Application
oracle communications_cloud_native_core_network_repository_function 22.2.0 <built-in method update of dict object at 0x7fd3855c3800> Application
oracle communications_cloud_native_core_network_slice_selection_function 22.1.1 <built-in method update of dict object at 0x7fd319dd7600> Application
oracle communications_cloud_native_core_unified_data_repository 22.2.0 <built-in method update of dict object at 0x7fd340a12a80> Application
oracle mysql_workbench * <built-in method update of dict object at 0x7fd319dd7e00> Application
oracle zfs_storage_appliance_kit 8.8 <built-in method update of dict object at 0x7fd36ad4d340> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*
Yes cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
Yes cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*
Yes cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
Yes cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

References