Yüksek CVSS 7.5

CVE-2022-40303: Libxml2: tamsayı taşması

Yayın: 23 Kasım 2022 03:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Özet bilgiler

Ürün: Xmlsoft Libxml2
CVSS v3.1: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: %41,37 (yüzdelik 99)
CWE: CWE-190
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
xmlsoft-libxml2	—	—	2.10.3
netapp-active-iq-unified-manager	—	—	—
netapp-clustered-data-ontap	—	—	—
netapp-clustered-data-ontap-antivirus-connector	—	—	—
netapp-netapp-manageability-sdk	—	—	—
netapp-ontap-select-deploy-administration-utility	—	—	—
netapp-snapmanager	—	—	—
apple-ipados	—	—	15.7.2
apple-iphone-os	—	—	15.7.2
apple-macos	11.0	—	11.7.2
apple-macos	12.0	—	12.6.2
apple-tvos	—	—	16.2
apple-watchos	—	—	9.2
netapp-h300s-firmware	—	—	—
netapp-h500s-firmware	—	—	—
netapp-h700s-firmware	—	—	—
netapp-h410s-firmware	—	—	—
netapp-h410c-firmware	—	—	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları