Lucene search
AlmaLinuxALSA-2023:0173HistoryJan 16, 2023 - 12:00 a.m.
Moderate: libxml2 security update
2023-01-1600:00:00
errata.almalinux.org
10
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
68.4%
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303)
- libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | i686 | libxml2 | < 2.9.7-15.el8_7.1 | libxml2-2.9.7-15.el8_7.1.i686.rpm |
| almalinux | 8 | i686 | libxml2-devel | < 2.9.7-15.el8_7.1 | libxml2-devel-2.9.7-15.el8_7.1.i686.rpm |
| almalinux | 8 | x86_64 | libxml2 | < 2.9.7-15.el8_7.1 | libxml2-2.9.7-15.el8_7.1.x86_64.rpm |
| almalinux | 8 | x86_64 | python3-libxml2 | < 2.9.7-15.el8_7.1 | python3-libxml2-2.9.7-15.el8_7.1.x86_64.rpm |
| almalinux | 8 | aarch64 | libxml2 | < 2.9.7-15.el8_7.1 | libxml2-2.9.7-15.el8_7.1.aarch64.rpm |
| almalinux | 8 | aarch64 | python3-libxml2 | < 2.9.7-15.el8_7.1 | python3-libxml2-2.9.7-15.el8_7.1.aarch64.rpm |
| almalinux | 8 | aarch64 | libxml2-devel | < 2.9.7-15.el8_7.1 | libxml2-devel-2.9.7-15.el8_7.1.aarch64.rpm |
| almalinux | 8 | x86_64 | libxml2-devel | < 2.9.7-15.el8_7.1 | libxml2-devel-2.9.7-15.el8_7.1.x86_64.rpm |
| almalinux | 8 | ppc64le | libxml2 | < 2.9.7-15.el8_7.1 | libxml2-2.9.7-15.el8_7.1.ppc64le.rpm |
| almalinux | 8 | ppc64le | python3-libxml2 | < 2.9.7-15.el8_7.1 | python3-libxml2-2.9.7-15.el8_7.1.ppc64le.rpm |
Related
oraclelinux
oraclelinux
libxml2 security update
2023-01-24 00:00:00
libxml2 security update
2023-01-16 00:00:00
nessus
nessus
RHEL 8 : libxml2 (RHSA-2023:0173)
2023-01-16 00:00:00
Amazon Linux 2 : libxml2 (ALAS-2023-1996)
2023-03-22 00:00:00
EulerOS Virtualization 3.0.2.0 : libxml2 (EulerOS-SA-2023-1740)
2023-05-07 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: xmlsec1-1.2.34-4.fc37
2022-11-13 01:14:14
[SECURITY] Fedora 36 Update: libxml2-2.10.3-1.fc36
2022-10-25 13:13:35
[SECURITY] Fedora 37 Update: libxml2-2.10.3-2.fc37
2022-11-13 01:14:11
altlinux
altlinux
Security fix for the ALT Linux 9 package libxml2 version 1:2.9.10-alt6.p9.1
2023-02-13 00:00:00
mageia
mageia
Updated libxml2 packages fix security vulnerability
2022-11-08 22:44:28
rocky
rocky
libxml2 security update
2023-01-23 14:30:36
libxml2 security update
2023-01-16 09:03:23
debian
debian
[SECURITY] [DSA 5271-1] libxml2 security update
2022-11-05 19:46:29
[SECURITY] [DLA 3172-1] libxml2 security update
2022-10-30 15:57:58
ibm
ibm
Security Bulletin: AIX is vulnerable to arbitrary code execution due to libxml2 (CVE-2022-40303 and CVE-2022-40304)
2023-05-04 20:31:06
gentoo
gentoo
libxml2: Multiple Vulnerabilities
2022-10-31 00:00:00
redhat
redhat
(RHSA-2023:0338) Moderate: libxml2 security update
2023-01-23 14:30:36
(RHSA-2023:0173) Moderate: libxml2 security update
2023-01-16 09:03:23
(RHSA-2024:0413) Moderate: libxml2 security update
2024-01-24 14:40:23
ubuntu
ubuntu
libxml2 vulnerabilities
2022-12-05 00:00:00
libxml2 vulnerabilities
2022-12-05 00:00:00
osv
osv
libxml2 - security update
2022-11-05 00:00:00
Moderate: libxml2 security update
2023-01-23 00:00:00
Moderate: libxml2 security update
2023-01-16 00:00:00
aix
aix
AIX is vulnerable to arbitrary code execution due to libxml2
2023-02-08 13:18:47
almalinux
almalinux
Moderate: libxml2 security update
2023-01-23 00:00:00
amazon
amazon
Medium: libxml2
2023-03-17 16:34:00
Medium: libxml2
2023-04-27 16:19:00
apple
apple
About the security content of iOS 16.1.1 and iPadOS 16.1.1
2022-11-09 00:00:00
About the security content of macOS Ventura 13.0.1
2022-11-09 00:00:00
About the security content of macOS Big Sur 11.7.2
2022-12-13 00:00:00
suse
suse
Security update for libxml2 (important)
2022-10-21 00:00:00
Security update for libxml2 (important)
2022-11-04 00:00:00
redos
redos
ROS-20221110-01
2022-11-10 00:00:00
hivepro
hivepro
Apple addresses the macOS code execution flaws
2022-11-11 13:49:02
cloudlinux
cloudlinux
libxml2: Fix of 2 CVEs
2022-12-08 17:47:57
github
github
Update bundled libxml2 to v2.10.3 to resolve multiple CVEs
2022-10-18 18:12:31
cloudfoundry
cloudfoundry
USN-5760-1: libxml2 vulnerabilities | Cloud Foundry
2023-01-26 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0546
2022-12-05 00:00:00
Important Photon OS Security Update - PHSA-2022-0293
2022-12-06 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0499
2022-12-06 00:00:00
slackware
slackware
[slackware-security] libxml2
2023-12-10 01:15:09
alpinelinux
alpinelinux
CVE-2022-40304
2022-11-23 18:15:00
CVE-2022-40303
2022-11-23 00:15:00
prion
prion
Double free
2022-11-23 18:15:00
Integer overflow
2022-11-23 00:15:00
veracode
veracode
Double Free
2022-10-19 02:10:03
Denial Of Service (DoS)
2022-10-19 02:12:32
debiancve
debiancve
CVE-2022-40303
2022-11-23 00:15:00
CVE-2022-40304
2022-11-23 18:15:00
cve
cve
CVE-2022-40304
2022-11-23 18:15:00
CVE-2022-40303
2022-11-23 00:15:00
redhatcve
redhatcve
CVE-2022-40303
2022-10-19 19:17:28
CVE-2022-40304
2022-10-19 20:47:20
cbl_mariner
cbl_mariner
CVE-2022-40303 affecting package libxml2 2.10.0-1
2022-12-09 00:19:55
CVE-2022-40304 affecting package libxml2 2.10.0-1
2022-12-09 00:19:55
CVE-2022-40304 affecting package libxml2 2.9.14-2
2022-12-06 23:44:35
ubuntucve
ubuntucve
CVE-2022-40304
2022-11-23 00:00:00
CVE-2022-40303
2022-11-23 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2356
2024-02-20 10:05:34
trellix
trellix
The Bug Report – November 2022 Edition
2022-12-07 00:00:00
The Bug Report – November 2022 Edition
2022-12-07 00:00:00
packetstorm
packetstorm
libxml2 xmlParseNameComplex Integer Overflow
2022-11-14 00:00:00
zdt
zdt
libxml2 xmlParseNameComplex Integer Overflow Vulnerability
2022-11-16 00:00:00
ics
ics
Siemens Telecontrol Server Basic
2024-04-11 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
68.4%
Related for ALSA-2023:0173