CVE-2022-29824Medium· 6.5▾ SunlitIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, m…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.8 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.8%
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
libxml2 < 2.9.14libxslt <= 1.1.35fedora = 34fedora = 35fedora = 36debian_linux = 9.0debian_linux = 10.0debian_linux = 11.0active_iq_unified_managerclustered_data_ontapclustered_data_ontap_antivirus_connectormanageability_software_development_kitontap_select_deploy_administration_utilitysmi-s_providersnapdrivesnapmanagersolidfire_&_hci_management_nodezfs_storage_appliance_kit = 8.8h300s_firmwareh500s_firmwareh700s_firmwareh410s_firmwareh410c_firmwareUpgrade past the affected range:
libxml2 2.9.14Connected by shared product, vendor, weakness, or advisory.
CVE-2022-40303High· 7.5An issue was discovered in libxml2 before 2.10.3
CVE-2022-23308High· 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
CVE-2021-3517High· 8.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11
CVE-2021-3537Medium· 5.9A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference
CVE-2021-3518High· 8.8There's a flaw in libxml2 in versions before 2.9.11
CVE-2020-24977Medium· 6.5GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c