Unknown
CVE-2022-29824
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2022-29824
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don’t check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2’s buffer functions, for example libxslt through 1.1.35, is affected as well.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
- debian,
- fedoraproject,
- netapp,
- oracle,
- xmlsoft
Products
- active iq unified manager -,
- clustered data ontap -,
- clustered data ontap antivirus connector -,
- debian linux 10.0,
- debian linux 11.0,
- debian linux 9.0,
- fedora 34,
- fedora 35,
- fedora 36,
- h300s firmware -,
- h410c firmware -,
- h410s firmware -,
- h500s firmware -,
- h700s firmware -,
- libxml2,
- libxslt,
- manageability software development kit -,
- ontap select deploy administration utility -,
- smi-s provider -,
- snapdrive -,
- snapmanager -,
- solidfire & hci management node -,
- zfs storage appliance kit 8.8
References
Advisory
Miscellaneous
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
