High · published October 24, 2022
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
| Product | Versions | Fixed in |
|---|---|---|
| libexpat_project/libexpat | ≤ 2.4.9 | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/oncommand_workflow_automation | all versions | — |
| netapp/solidfire_\&_hci_management_node | all versions | — |
| netapp/hci_compute_node_firmware | all versions | — |