QwikSec

Security Database

CVE

CWE

Training

CVE-2022-23308

Published: Feb 26, 2022

Modified: May 5, 2025

PUBLISHED

Description

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

FEDORA-2022-050c712ed7

vendor-advisory

[debian-lts-announce] 20220408 [SECURITY] [DLA 2972-1] libxml2 security update

mailing-list

20220516 APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina

mailing-list

20220516 APPLE-SA-2022-05-16-6 tvOS 15.5

mailing-list

20220516 APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6

mailing-list

20220516 APPLE-SA-2022-05-16-2 macOS Monterey 12.4

mailing-list

20220516 APPLE-SA-2022-05-16-5 watchOS 8.6

mailing-list

20220516 APPLE-SA-2022-05-16-1 iOS 15.5 and iPadOS 15.5

mailing-list

https://www.oracle.com/security-alerts/cpujul2022.html

https://support.apple.com/kb/HT213257

https://support.apple.com/kb/HT213256

https://support.apple.com/kb/HT213255

https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS

https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e

https://security.netapp.com/advisory/ntap-20220331-0008/

https://support.apple.com/kb/HT213253

https://support.apple.com/kb/HT213258

https://support.apple.com/kb/HT213254

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.