AZL-55967 CVE-2022-49043 affecting package libxml2 for versions less than 2.10.4-5

🗓️ 26 Jan 2025 06:15:21Reported by GoogleType

CVE-2022-49043 affects libxml2 versions older than 2.10.4-5; xmlXIncludeAddNode in xinclude.c has a use-after-free before 2.11.0.

Reporter	Title	Published	Views	Family All 164
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	5 Jun 202512:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	26 Mar 202518:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a libxml2 use-after-free vulnerability (CVE-2022-49043)	2 May 202515:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	12 Nov 202519:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	5 Jun 202512:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF006 (July 2025)	8 Aug 202515:41	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service due to libxml2 (CVE-2022-49043)	6 May 202514:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	11 Mar 202510:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a libxml2 use-after-free vulnerability (CVE-2022-49043)	2 May 202521:13	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities affect libxml2 and gcc packages shipped with IBM CICS TX Advanced.	29 Apr 202514:27	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-49043

21 Apr 2026 04:36Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.8 - 8.1

EPSS0.00222

SSVC