CVE-2022-29824

Description

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.

How to fix CVE-2022-29824

To remediate CVE-2022-29824, upgrade the affected package to a fixed version below.

• —upgrade to 2.9.14-r0 or later
• —upgrade to 0 or later
• —upgrade to 2.9.10+dfsg-6.7+deb11u2 or later
• —upgrade to 2.9.4+dfsg1-2.2+deb9u7 or later
• —upgrade to 2.9.4+dfsg1-7+deb10u4 or later

Is CVE-2022-29824 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (5)

• from 0, < 2.9.14-r0
• from 0, < 0
• from 0, < 2.9.10+dfsg-6.7+deb11u2
• from 0, < 2.9.4+dfsg1-2.2+deb9u7
• from 0, < 2.9.4+dfsg1-7+deb10u4

CVSS scores

References (2)

• ADVISORYsecurity.alpinelinux.org/vuln/CVE-2022-29824
• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2022-29824