High · published November 23, 2022
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
| Product | Versions | Fixed in |
|---|---|---|
| xmlsoft/libxml2 | < 2.10.3 | 2.10.3 |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/clustered_data_ontap | all versions | — |
| netapp/clustered_data_ontap_antivirus_connector | all versions | — |
| netapp/manageability_software_development_kit | all versions | — |
| netapp/smi-s_provider | all versions | — |
| netapp/snapmanager | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| apple/ipados | < 15.7.2 | 15.7.2 |
| apple/iphone_os | < 15.7.2 | 15.7.2 |
| apple/macos | ≥ 11.0, < 11.7.2 | 11.7.2 |
| apple/macos | ≥ 12.0, < 12.6.2 | 12.6.2 |
| apple/tvos | < 16.2 | 16.2 |
| apple/watchos | < 9.2 | 9.2 |