NetSight
IP …
high7.8

CVE-2022-40304

An issue was discovered in libxml2 before 2.10.3.

Impact

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.

Affected products

VendorProductAffected versions
XmlsoftLibxml2
before 2.10.3
NetappActive Iq Unified Manager
All versions
NetappClustered Data Ontap
All versions
NetappClustered Data Ontap Antivirus Connector
All versions
NetappManageability Software Development Kit
All versions
NetappSmi-S Provider
All versions
NetappSnapmanager
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions

Weakness classification

CWE-415

References