High · published February 26, 2022
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
| Product | Versions | Fixed in |
|---|---|---|
| xmlsoft/libxml2 | < 2.9.13 | 2.9.13 |
| fedoraproject/fedora | all versions | — |
| debian/debian_linux | all versions | — |
| apple/ipados | < 15.5 | 15.5 |
| apple/iphone_os | < 15.5 | 15.5 |
| apple/mac_os_x | ≥ 10.15.0, < 10.15.7 | 10.15.7 |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/macos | ≥ 11.6.0, < 11.6.6 | 11.6.6 |
| apple/macos | ≥ 12.0, < 12.4 | 12.4 |
| apple/tvos | < 15.5 | 15.5 |
| apple/watchos | < 8.6 | 8.6 |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/clustered_data_ontap | all versions | — |
| netapp/clustered_data_ontap_antivirus_connector | all versions | — |
| netapp/manageability_software_development_kit | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| netapp/smi-s_provider | all versions | — |
| netapp/snapdrive | all versions | — |
| netapp/snapmanager | all versions | — |
| netapp/solidfire\,_enterprise_sds_\&_hci_storage_node | all versions | — |
| netapp/solidfire_\&_hci_management_node | all versions | — |
| netapp/bootstrap_os | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h300e_firmware | all versions | — |
| netapp/h500e_firmware | all versions | — |
| netapp/h700e_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| oracle/communications_cloud_native_core_binding_support_function | all versions | — |
| oracle/communications_cloud_native_core_network_function_cloud_native_environment | all versions | — |
| oracle/communications_cloud_native_core_network_repository_function | all versions | — |
| oracle/communications_cloud_native_core_network_repository_function | all versions | — |
| oracle/communications_cloud_native_core_network_slice_selection_function | all versions | — |
| oracle/communications_cloud_native_core_unified_data_repository | all versions | — |
| oracle/mysql_workbench | ≤ 8.0.29 | — |
| oracle/zfs_storage_appliance_kit | all versions | — |