CVE-2022-23308: Use After Free
Published Feb 20, 2022
·Updated
A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XMLPARSEDTDVALID option and without the XMLPARSENOENT option, resulting in a use-after-free issue.
Other sources
AMD. A buffer overflow issue was addressed with improved memory handling.
— Apple
AMD. A memory corruption issue was addressed with improved state management.
— Apple
apache. Multiple issues were addressed by updating apache to version 2.4.53.
— Apple
AppKit. A logic issue was addressed with improved validation.
— Apple
AppleAVD. An out-of-bounds write issue was addressed with improved bounds checking.
— Apple
Credit
CVE-2022-23308, Arsenii Kostromin (0x3c3e)(Microsoft), Jonathan Bar Or(Microsoft), Zhipeng Huo@@R3dF09(Tencent Security Xuanwu Lab), Yuebin Sun@@yuebinsun2020(Tencent Security Xuanwu Lab), Max Shavrick@@_mxms(the Google Security Team), Zubair Ashraf(Crowdstrike), CVE-2022-0778, Mickey Jin@@patch1t, @@gorelics, an anonymous researcher, Linus Henze(Pinauten GmbH), Peter Nguyễn Vũ Hoàng(STAR Labs), Felix Poulin-Belanger, Antonio Cheong Yu Xuan(YCISCQ), Arsenii Kostromin (0x3c3e), CVE-2021-4136, CVE-2021-4166, CVE-2021-4173, CVE-2021-4187, CVE-2021-4192, CVE-2021-4193, CVE-2021-46059, CVE-2022-0128, Heige(KnownSec 404 Team), Bo Qu(Palo Alto Networks), Scarlet Raine, Wang Yu(Cyberserval), CVE-2022-0530, Tavis Ormandy, CVE-2021-45444, Liu Long(Ant Security Light), Jack Dates(RET2 Systems Inc), Antonio Zekic@@antoniozekic, Jeonghoon Shin(Theori working with Trend Micro Zero Day Initiative), Peter Nguyễn Vũ Hoàng@@peternguyen14(STAR Labs), Ned Williamson(Google Project Zero), @@gorelics(BreakPoint), (BreakPoint), Ron Masas(BreakPoint), Wojciech Reguła@@_r3ggi(SecuRing), Yonghwi Jin@@jinmo123(Theori), Lockheed Martin Red Team, Jeremy Brown(Trend Micro Zero Day Initiative), Michael DePlante@@izobashi(Trend Micro Zero Day Initiative), Qi Sun(Trend Micro), Ye Zhang@@co0py_Cat(Baidu Security), Robert Ai(Trend Micro), CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, Paul Walker(Bury), Nathaniel Ekoniak(Ennate Technologies), Gergely Kalman@@gergely_kalman(Mandiant), (Mandiant), Joshua Mason(Mandiant), Ron Waisberg(SecuRing), an anonymous researcher(SecuRing), (Perception Point), Ron Hass@@ronhass7(Perception Point), ryuzaki, Chijin Zhou(ShuiMuYuLin Ltd), Tsinghua wingtecher lab, Jeonghoon Shin(Theori), SorryMybad@@S0rryMybad(Kunlun Lab), Dongzhuo Zhao(ADLab of Venustech), ABC Research s.r.o, Jon Thompson(Evolve), IA), actae0n(Blacksun Hackers Club working with Trend Micro Zero Day Initiative), Andrew Williams(Google), Avi Drissman(Google), chenyuwang@@mzzzz__(Tencent Security Xuanwu Lab), Jordy Zomer@@pwningsystems
Affected Software
99 affected componentsFixes available
redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8
0:1.6.1-91.el8
redhat/jbcs-httpd24-curl<0:7.78.0-3.el8
0:7.78.0-3.el8
redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8
0:2.4.37-80.el8
redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8
0:1.39.2-41.el8
redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8
1:1.1.1g-11.el8
redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8
0:1.0.0-11.el8
redhat/jbcs-httpd24-openssl-pkcs11<0:0.4.10-26.el8
0:0.4.10-26.el8
redhat/jbcs-httpd24-apr-util<0:1.6.1-91.jbcs.el7
0:1.6.1-91.jbcs.el7
redhat/jbcs-httpd24-curl<0:7.78.0-3.jbcs.el7
0:7.78.0-3.jbcs.el7
redhat/jbcs-httpd24-httpd<0:2.4.37-80.jbcs.el7
0:2.4.37-80.jbcs.el7
redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.jbcs.el7
0:1.39.2-41.jbcs.el7
redhat/jbcs-httpd24-openssl<1:1.1.1g-11.jbcs.el7
1:1.1.1g-11.jbcs.el7
redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.jbcs.el7
0:1.0.0-11.jbcs.el7
redhat/jbcs-httpd24-openssl-pkcs11<0:0.4.10-26.jbcs.el7
0:0.4.10-26.jbcs.el7
redhat/libxml2<0:2.9.7-12.el8_5
0:2.9.7-12.el8_5
redhat/libxml2<2.9.13
2.9.13
Apple macOS Big Sur<11.6.6
11.6.6
Apple tvOS<15.5
15.5
Apple Catalina
Apple WatchOS<8.6
8.6
Apple macOS Monterey<12.4
12.4
Apple iOS<15.5
15.5
Apple iPadOS<15.5
15.5
Xmlsoft Libxml2<2.9.13
Fedoraproject Fedora=34
Debian Debian Linux=9.0
Apple iPadOS<15.5
Apple iPhone OS<15.5
Apple iOS and macOS>=10.15.0<10.15.7
Apple iOS and macOS=10.15.7
Apple iOS and macOS=10.15.7-security_update_2020-001
Apple iOS and macOS=10.15.7-security_update_2021-001
Apple iOS and macOS=10.15.7-security_update_2021-002
Apple iOS and macOS=10.15.7-security_update_2021-003
Apple iOS and macOS=10.15.7-security_update_2021-004
Apple iOS and macOS=10.15.7-security_update_2021-005
Apple iOS and macOS=10.15.7-security_update_2021-006
Apple iOS and macOS=10.15.7-security_update_2021-007
Apple iOS and macOS=10.15.7-security_update_2021-008
Apple iOS and macOS=10.15.7-security_update_2022-001
Apple iOS and macOS=10.15.7-security_update_2022-003
Apple macOS>=11.6.0<11.6.6
Apple macOS>=12.0<12.4
Apple tvOS<15.5
Apple WatchOS<8.6
NetApp Active Iq Unified Manager Vmware Vsphere
NetApp Clustered Data ONTAP
NetApp Clustered Data Ontap Antivirus Connector
NetApp Manageability Software Development Kit
NetApp ONTAP Select Deploy administration utility
NetApp Smi-s Provider
NetApp Snapdrive Unix
NetApp Snapmanager Oracle
NetApp Solidfire\, Enterprise Sds \& Hci Storage Node
NetApp Solidfire \& Hci Management Node
NetApp Bootstrap Os
NetApp Hci Compute Node
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H300e Firmware
NetApp H300e
NetApp H500e Firmware
NetApp H500e
NetApp H700e Firmware
NetApp H700e
NetApp H410s Firmware
NetApp H410s
NetApp H410c Firmware
NetApp H410c
Oracle Communications Cloud Native Core Binding Support Function=22.2.0
Oracle Communications Cloud Native Core Network Function Cloud Native Environment=22.1.0
Oracle Communications Cloud Native Core Network Repository Function=22.1.2
Oracle Communications Cloud Native Core Network Repository Function=22.2.0
Oracle Communications Cloud Native Core Network Slice Selection Function=22.1.1
Oracle Communications Cloud Native Core Unified Data Repository=22.2.0
Oracle MySQL Workbench<=8.0.29
Oracle ZFS Storage Appliance Kit=8.8
All of the following
NetApp Bootstrap Os
NetApp Hci Compute Node
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H300e Firmware
NetApp H300e
All of the following
NetApp H500e Firmware
NetApp H500e
All of the following
NetApp H700e Firmware
NetApp H700e
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H410c Firmware
NetApp H410c
Remediation
Patch Available
Event History
Feb 20, 2022
CVE Published
12:00 AM
Feb 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
May 16, 2022
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
Description
Updated
via Apple·12:00 AM
DescriptionWeakness
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2021-44224
- CVE-2021-44790
- CVE-2022-22719
- CVE-2022-22720
- CVE-2022-22721
- CVE-2022-22665
- CVE-2022-22675
- CVE-2022-22630
- CVE-2022-26751
- CVE-2022-26698
- CVE-2022-26697
- CVE-2022-22663
- CVE-2022-26721
- CVE-2022-26722
- CVE-2022-26763
- CVE-2022-22674
- CVE-2022-26720
- CVE-2022-26770
- CVE-2022-26756
- CVE-2022-26769
- CVE-2022-26748
- CVE-2022-26768
- CVE-2022-26714
- CVE-2022-26757
- CVE-2021-30946
- CVE-2022-26767
- CVE-2022-26706
- CVE-2022-32882
- CVE-2022-32790
- CVE-2022-26776
- CVE-2022-0778
- CVE-2022-23308
- CVE-2022-32794
- CVE-2022-26712
- CVE-2022-26746
- CVE-2022-26731
- CVE-2022-26766
- CVE-2022-26718
- CVE-2022-26723
- CVE-2022-26715
- CVE-2022-26728
- CVE-2022-26726
- CVE-2022-26755
- CVE-2021-4136
- CVE-2021-4166
- CVE-2021-4173
- CVE-2021-4187
- CVE-2021-4192
- CVE-2021-4193
- CVE-2021-46059
- CVE-2022-0128
- CVE-2022-22589
- CVE-2022-26745
- CVE-2022-26761
- CVE-2022-0530
- CVE-2018-25032
- CVE-2021-45444
- CVE-2022-26702
- CVE-2022-26724
- CVE-2022-26736
- CVE-2022-26737
- CVE-2022-26738
- CVE-2022-26739
- CVE-2022-26740
- CVE-2022-26711
- CVE-2022-26701
- CVE-2022-26771
- CVE-2022-26764
- CVE-2022-26765
- CVE-2022-26775
- CVE-2022-26708
- CVE-2022-26700
- CVE-2022-26709
- CVE-2022-26710
- CVE-2022-26717
- CVE-2022-26716
- CVE-2022-26719
- CVE-2022-26727
- CVE-2022-26772
- CVE-2022-26741
- CVE-2022-26742
- CVE-2022-26749
- CVE-2022-26750
- CVE-2022-26752
- CVE-2022-26753
- CVE-2022-26754
- CVE-2022-26707
- CVE-2022-32783
- CVE-2022-26694
- CVE-2022-32781
- CVE-2022-26725
- CVE-2022-26758
- CVE-2022-26743
- CVE-2022-48575
- CVE-2022-22617
- CVE-2022-32782
- CVE-2022-26693
- CVE-2022-26704
- CVE-2022-42857
- CVE-2022-26696
- CVE-2022-22677
- CVE-2022-26762
- CVE-2022-26744
- CVE-2022-22673
- CVE-2022-26703
- CVE-2022-26760
- CVE-2015-4142
Frequently Asked Questions
1
What is CVE-2022-23308?
CVE-2022-23308 is a vulnerability in libxml2 that allows for a use-after-free issue.
2
How does CVE-2022-23308 affect Apple tvOS?
Apple tvOS versions up to 15.5 are affected by CVE-2022-23308.
3
How does CVE-2022-23308 affect Apple macOS Monterey?
Apple macOS Monterey versions up to 12.4 are affected by CVE-2022-23308.
4
What is the severity of CVE-2022-23308?
CVE-2022-23308 has a severity value of 8.1, which is considered high.
5
How can I fix CVE-2022-23308?
To fix CVE-2022-23308, it is recommended to update to the latest version of libxml2 or apply the specific security patches provided by the affected vendors.