NetSight
IP …
high7.5

CVE-2022-23308

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Impact

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Affected products

VendorProductAffected versions
XmlsoftLibxml2
before 2.9.13
FedoraprojectFedora
Version 34
DebianDebian Linux
Version 9.0
AppleIpados
before 15.5
AppleIphone Os
before 15.5
AppleMac Os X
from 10.15.0 before 10.15.7
Version 10.15.7
AppleMacos
from 11.6.0 before 11.6.6
from 12.0 before 12.4
AppleTvos
before 15.5
AppleWatchos
before 8.6
NetappActive Iq Unified Manager
All versions
NetappClustered Data Ontap
All versions
NetappClustered Data Ontap Antivirus Connector
All versions

Weakness classification

CWE-416

References