High · published November 23, 2022
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
| Product | Versions | Fixed in |
|---|---|---|
| xmlsoft/libxml2 | < 2.10.3 | 2.10.3 |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/clustered_data_ontap | all versions | — |
| netapp/clustered_data_ontap_antivirus_connector | all versions | — |
| netapp/netapp_manageability_sdk | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| netapp/snapmanager | all versions | — |
| apple/ipados | < 15.7.2 | 15.7.2 |
| apple/iphone_os | < 15.7.2 | 15.7.2 |
| apple/macos | ≥ 11.0, < 11.7.2 | 11.7.2 |
| apple/macos | ≥ 12.0, < 12.6.2 | 12.6.2 |
| apple/tvos | < 16.2 | 16.2 |
| apple/watchos | < 9.2 | 9.2 |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |