NetSight
IP …
high7.5

CVE-2022-40303

An issue was discovered in libxml2 before 2.10.3.

Impact

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Affected products

VendorProductAffected versions
XmlsoftLibxml2
before 2.10.3
NetappActive Iq Unified Manager
All versions
NetappClustered Data Ontap
All versions
NetappClustered Data Ontap Antivirus Connector
All versions
NetappNetapp Manageability Sdk
All versions
NetappOntap Select Deploy Administration Utility
All versions
NetappSnapmanager
All versions
AppleIpados
before 15.7.2
AppleIphone Os
before 15.7.2
AppleMacos
from 11.0 before 11.7.2
from 12.0 before 12.6.2
AppleTvos
before 16.2
AppleWatchos
before 9.2

Weakness classification

CWE-190

References