Description
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Apple / iPadOS15.7.2
- Apple / iphone_os15.7.2
- Apple / macOS11.0 – 11.7.2
- Apple / tvOS16.2
- Apple / watchOS9.2
- NetApp / active_iq_unified_manager
- NetApp / Clustered Data ONTAP
- NetApp / clustered_data_ontap_antivirus_connector
- NetApp / h300s_firmware
- NetApp / h410c_firmware
- NetApp / h410s_firmware
- NetApp / h500s_firmware
- NetApp / h700s_firmware
- NetApp / netapp_manageability_sdk
- NetApp / ONTAP Select Deploy administration utility
- NetApp / snapmanager
- xmlsoft / libxml22.10.3
References
- MISChttps://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3
- MISChttps://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0
- MISChttps://security.netapp.com/advisory/ntap-20221209-0003/
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213534
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213533
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213531
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213536
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213535
- MAILING_LISThttp://seclists.org/fulldisclosure/2022/Dec/21
- MAILING_LISThttp://seclists.org/fulldisclosure/2022/Dec/25
- MAILING_LISThttp://seclists.org/fulldisclosure/2022/Dec/26
- MAILING_LISThttp://seclists.org/fulldisclosure/2022/Dec/24
- MAILING_LISThttp://seclists.org/fulldisclosure/2022/Dec/27
Updated 44m ago · 8 sources