Lucene search
RedHatRHSA-2022:5250HistoryJun 28, 2022 - 8:27 a.m.
(RHSA-2022:5250) Moderate: libxml2 security update
2022-06-2808:27:27
access.redhat.com
59
libxml2
security update
integer overflows
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
51.3%
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write (CVE-2022-29824)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | aarch64 | python3-libxml2-debuginfo | < 2.9.13-1.el9_0.1 | python3-libxml2-debuginfo-2.9.13-1.el9_0.1.aarch64.rpm |
| RedHat | 9 | aarch64 | libxml2 | < 2.9.13-1.el9_0.1 | libxml2-2.9.13-1.el9_0.1.aarch64.rpm |
| RedHat | 9 | ppc64le | python3-libxml2 | < 2.9.13-1.el9_0.1 | python3-libxml2-2.9.13-1.el9_0.1.ppc64le.rpm |
| RedHat | 9 | x86_64 | libxml2-debugsource | < 2.9.13-1.el9_0.1 | libxml2-debugsource-2.9.13-1.el9_0.1.x86_64.rpm |
| RedHat | 9 | ppc64le | libxml2 | < 2.9.13-1.el9_0.1 | libxml2-2.9.13-1.el9_0.1.ppc64le.rpm |
| RedHat | 9 | s390x | python3-libxml2-debuginfo | < 2.9.13-1.el9_0.1 | python3-libxml2-debuginfo-2.9.13-1.el9_0.1.s390x.rpm |
| RedHat | 9 | i686 | libxml2 | < 2.9.13-1.el9_0.1 | libxml2-2.9.13-1.el9_0.1.i686.rpm |
| RedHat | 9 | ppc64le | libxml2-debuginfo | < 2.9.13-1.el9_0.1 | libxml2-debuginfo-2.9.13-1.el9_0.1.ppc64le.rpm |
| RedHat | 9 | s390x | libxml2-debuginfo | < 2.9.13-1.el9_0.1 | libxml2-debuginfo-2.9.13-1.el9_0.1.s390x.rpm |
| RedHat | 9 | s390x | python3-libxml2 | < 2.9.13-1.el9_0.1 | python3-libxml2-2.9.13-1.el9_0.1.s390x.rpm |
Related
nessus
nessus
RHEL 8 : libxml2 (RHSA-2022:5317)
2022-07-01 00:00:00
EulerOS Virtualization 2.10.1 : libxml2 (EulerOS-SA-2022-2113)
2022-07-15 00:00:00
Debian DSA-5142-1 : libxml2 - security update
2022-05-23 00:00:00
rocky
rocky
libxml2 security update
2022-06-28 08:27:27
libxml2 security update
2022-06-28 10:52:13
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2022-05-05 02:55:45
openvas
openvas
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2022-2002)
2022-07-08 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2022-2390)
2022-09-26 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2022-2622)
2022-10-28 00:00:00
cvelist
cvelist
CVE-2022-29824
2022-05-03 00:00:00
slackware
slackware
[slackware-security] libxml2
2022-05-02 20:17:02
cbl_mariner
cbl_mariner
CVE-2022-29824 affecting package libxslt 1.1.34-3
2022-06-15 17:03:07
CVE-2022-29824 affecting package libxml2 2.9.13-1
2022-07-14 20:59:56
CVE-2022-29824 affecting package libxslt for versions less than 1.1.34-7
2022-06-03 17:54:00
redos
redos
ROS-20220516-08
2022-05-16 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2022-07-01 00:00:00
libxml2 security update
2022-06-30 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: libxml2-2.9.14-1.fc34
2022-05-18 01:25:14
[SECURITY] Fedora 36 Update: libxml2-2.9.14-1.fc36
2022-05-07 05:16:39
[SECURITY] Fedora 35 Update: libxml2-2.9.14-1.fc35
2022-05-14 01:20:32
ubuntucve
ubuntucve
CVE-2022-29824
2022-05-03 00:00:00
aix
aix
AIX is vulnerable to a denial of service due to libxml2
2022-09-12 15:07:01
osv
osv
Moderate: libxml2 security update
2022-06-28 08:27:27
Integer Overflow or Wraparound in libxml2 affects Nokogiri
2022-05-18 20:06:48
libxml2 - security update
2022-05-22 00:00:00
debiancve
debiancve
CVE-2022-29824
2022-05-03 03:15:06
mageia
mageia
Updated libxml2 packages fix security vulnerability
2022-05-12 13:24:45
prion
prion
Integer overflow
2022-05-03 03:15:00
amazon
amazon
Medium: libxml2
2022-09-15 04:46:00
Medium: libxml2
2023-04-27 16:19:00
packetstorm
packetstorm
libxml2 xmlBufAdd Heap Buffer Overflow
2022-06-01 00:00:00
libxml2 xmlParseNameComplex Integer Overflow
2022-11-14 00:00:00
github
github
Integer Overflow or Wraparound in libxml2 affects Nokogiri
2022-05-18 20:06:48
cve
cve
CVE-2022-29824
2022-05-03 03:15:06
zdt
zdt
libxml2 xmlBufAdd Heap Buffer Overflow Exploit
2022-06-02 00:00:00
libxml2 xmlParseNameComplex Integer Overflow Vulnerability
2022-11-16 00:00:00
alpinelinux
alpinelinux
CVE-2022-29824
2022-05-03 03:15:06
nvd
nvd
CVE-2022-29824
2022-05-03 03:15:06
debian
debian
[SECURITY] [DSA 5142-1] libxml2 security update
2022-05-22 08:45:42
[SECURITY] [DLA 3012-1] libxml2 security update
2022-05-16 23:04:30
redhatcve
redhatcve
CVE-2022-29824
2022-05-05 14:26:15
redhat
redhat
(RHSA-2022:5317) Moderate: libxml2 security update
2022-06-28 10:52:13
(RHSA-2022:5699) Moderate: Secondary Scheduler Operator for Red Hat OpenShift 1.0.1 security update
2022-07-28 14:39:39
(RHSA-2022:5704) Moderate: ACS 3.71 enhancement and security update
2022-07-25 21:38:29
cloudfoundry
cloudfoundry
USN-5422-1: libxml2 vulnerabilities | Cloud Foundry
2022-07-29 00:00:00
suse
suse
Security update for libxml2 (important)
2022-07-26 00:00:00
Security update for libxml2 (important)
2022-05-19 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0411
2022-06-28 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0411
2022-06-28 00:00:00
Important Photon OS Security Update - PHSA-2022-0198
2022-06-14 00:00:00
ubuntu
ubuntu
libxml2 vulnerabilities
2022-05-16 00:00:00
gentoo
gentoo
libxml2: Multiple Vulnerabilities
2022-10-16 00:00:00
altlinux
altlinux
rosalinux
rosalinux
Advisory ROSA-SA-2024-2356
2024-02-20 10:05:34
androidsecurity
androidsecurity
Android 14 Security Release Notes
2023-10-04 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
51.3%
Related for RHSA-2022:5250