CVE-2022-23308

Change history 1

1. 2026-10-15 00:45First seenCVSS 7.5 · xmlsoft, fedoraproject, debianNVD modified 2026-10-14 16:17

Affected (CPE criteria) 48

• cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:*:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*
• cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
• cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
• cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
• cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*
• cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
• cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
• and 8 more

References 41

• http://seclists.org/fulldisclosure/2022/May/33 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/34 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/35 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/36 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/37 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/38 Mailing List, Third Party Advisory
• https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e Patch, Third Party Advisory
• https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS Release Notes, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/
• https://security.gentoo.org/glsa/202210-03 Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220331-0008/ Third Party Advisory
• https://support.apple.com/kb/HT213253 Third Party Advisory
• https://support.apple.com/kb/HT213254 Third Party Advisory
• https://support.apple.com/kb/HT213255 Third Party Advisory
• https://support.apple.com/kb/HT213256 Third Party Advisory
• https://support.apple.com/kb/HT213257 Third Party Advisory
• https://support.apple.com/kb/HT213258 Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.html Patch, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/33 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/34 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/35 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/36 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/37 Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/May/38 Mailing List, Third Party Advisory
• https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e Patch, Third Party Advisory
• https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS Release Notes, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/
• https://security.gentoo.org/glsa/202210-03 Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220331-0008/ Third Party Advisory
• https://support.apple.com/kb/HT213253 Third Party Advisory
• https://support.apple.com/kb/HT213254 Third Party Advisory
• https://support.apple.com/kb/HT213255 Third Party Advisory
• https://support.apple.com/kb/HT213256 Third Party Advisory
• https://support.apple.com/kb/HT213257 Third Party Advisory
• https://support.apple.com/kb/HT213258 Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.html Patch, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html
• https://cert-portal.siemens.com/productcert/html/ssa-419740.html
• https://cert-portal.siemens.com/productcert/html/ssa-942865.html