CVE-2022-23308
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.5epss 5.1%
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
n/a · n/aReferencias
https://cert-portal.siemens.com/productcert/html/ssa-398330.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-419740.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-942865.htmlhttp://seclists.org/fulldisclosure/2022/May/33http://seclists.org/fulldisclosure/2022/May/34http://seclists.org/fulldisclosure/2022/May/35http://seclists.org/fulldisclosure/2022/May/36http://seclists.org/fulldisclosure/2022/May/37http://seclists.org/fulldisclosure/2022/May/38https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340ehttps://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWShttps://lists.debian.org/debian-lts-announce/2022/04/msg00004.html