Integer overflow in Libxml2 - CVE-2022-29824

Vulnerability identifier: #VU62741

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-29824

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*). A remote attacker can pass specially crafted multi-gigabyte XML file to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Libxml2
libxslt
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
IBM AIX
SUSE Enterprise Storage
Anolis OS
HPE Helion Openstack
Red Hat Enterprise Linux for x86_64
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Oracle Linux
Oracle Solaris
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
openEuler
Fedora
Google Android
Chrome OS
Submariner
Gatekeeper Operator
IBM MQ Operator
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
OpenShift Logging
Tenable Nessus
Oracle HTTP Server
IBM Robotic Process Automation
Oracle Communications Cloud Native Core Binding Support Function
Netcool Operations Insight
App Connect Enterprise Certified Container
Red Hat OpenStack
OpenShift API for Data Protection (OADP)
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Cloud Pak for Security (CP4S)
IBM Qradar SIEM
IBM VIOS
Dell EMC NetWorker vProxy
Splunk Enterprise
RecoverPoint Classic
IBM supplied MQ Advanced container images
cflinuxfs3
IBM Cloud Pak for Watson AIOps
EMC Cloud Tiering Appliance
Dell Data Protection Central
Red Hat Ceph Storage
Splunk Universal Forwarder
MySQL Workbench
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libxml2
libxml2-utils (Ubuntu package)
libxml2 (Ubuntu package)
libxml2 (Debian package)
libxml2-tools-debuginfo
libxml2-2-debuginfo-32bit
libxml2-devel
python-libxml2-debugsource
python-libxml2
python-libxml2-debuginfo
libxml2-tools
libxml2-debugsource
libxml2-2-debuginfo
libxml2-2-32bit
libxml2-2
libxml2-doc
python3-libxml2
python3-libxml2-python
libxml2-2-32bit-debuginfo
python2-libxml2-python-debuginfo
python2-libxml2-python
python3-libxml2-python-debuginfo
python-libxml2-python-debugsource
libxml2-debuginfo
libxml2-help
python2-libxml2
libxml2 (Red Hat package)
libxml2-devel-32bit
python3-libxml2-debuginfo
dev-libs/libxml2
SecurID Authentication Manager
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
Red Hat OpenShift Serverless
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift Virtualization
Dell EMC Storage Monitoring and Reporting (SMR)
Dell EMC VxRail Appliance
RSA Authentication Manager

Install updates from vendor's website.

Libxml2 - update to 2.9.14
Submariner - update to 0.13.0
Gatekeeper Operator - update to 0.2
OpenShift API for Data Protection (OADP) - addressed in versions 1.0.4, 1.1.0
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.0.1
IBM MQ Operator - addressed in versions 1.3.6, 2.0.1
Migration Toolkit for Containers - addressed in versions 1.7.3, 1.7.4
Cloud Pak for Security (CP4S) - update to 1.10.7.0
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.12, 2.4.6, 2.5.1
Red Hat Advanced Cluster Security for Kubernetes - update to 3.71
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.0
Dell EMC NetWorker vProxy - update to 4.3.0-32
Red Hat OpenShift Container Platform - addressed in versions 4.11.0, 4.11.45, 4.13.0
Dell Secure Connect Gateway - update to 5.12.00.10
RecoverPoint Classic - update to 5.1 SP4 P4
OpenShift Logging - addressed in versions 5.2.13, 5.3.10, 5.4.3
Tenable Nessus - addressed in versions 8.15.7, 10.3.1, 10.5.2
MySQL Workbench - update to 8.0.31
Splunk Enterprise - addressed in versions 8.1.11, 8.2.7.1, 9.0.1
SecurID Authentication Manager - addressed in versions 8.6 Patch 4, 8.7 Patch 1
IBM supplied MQ Advanced container images - addressed in versions 9.2.0.6-r1, 9.3.0.0-r2
IBM Robotic Process Automation - update to 21.0.3.1
cflinuxfs3 - update to 0.298.0
Netcool Operations Insight - update to 1.6.7
Red Hat OpenShift Serverless - update to 1.24.0
libxml2 - addressed in versions 2.9.1-6.6.42, 2.10.3-2
libxml2-utils (Ubuntu package) - addressed in versions 2.9.4+dfsg1-6.1ubuntu1.6, 2.9.10+dfsg-5ubuntu0.20.04.3, 2.9.12+dfsg-4ubuntu0.2, 2.9.13+dfsg-1ubuntu0.1
libxml2 (Ubuntu package) - addressed in versions 2.9.4+dfsg1-6.1ubuntu1.6, 2.9.10+dfsg-5ubuntu0.20.04.3, 2.9.12+dfsg-4ubuntu0.2, 2.9.13+dfsg-1ubuntu0.1
libxml2 (Debian package) - addressed in versions 2.9.4+dfsg1-7+deb10u4, 2.9.10+dfsg-6.7+deb11u2
libxml2-tools-debuginfo - addressed in versions 2.9.4-46.54.3, 2.9.7-150000.3.57.1, 2.9.14-150400.5.7.1
libxml2-2-debuginfo-32bit - update to 2.9.4-46.54.3
libxml2-devel - addressed in versions 2.9.4-46.54.3, 2.9.7-150000.3.57.1, 2.9.14-150400.5.7.1
python-libxml2-debugsource - update to 2.9.4-46.54.3
python-libxml2 - update to 2.9.4-46.54.3
python-libxml2-debuginfo - update to 2.9.4-46.54.3
libxml2-tools - addressed in versions 2.9.4-46.54.3, 2.9.7-150000.3.57.1, 2.9.14-150400.5.7.1
libxml2-debugsource - addressed in versions 2.9.4-46.54.3, 2.9.7-150000.3.57.1, 2.9.14-150400.5.7.1
libxml2-2-debuginfo - addressed in versions 2.9.4-46.54.3, 2.9.7-150000.3.57.1, 2.9.14-150400.5.7.1
libxml2-2-32bit - addressed in versions 2.9.4-46.54.3, 2.9.7-150000.3.57.1, 2.9.14-150400.5.7.1
libxml2-2 - addressed in versions 2.9.4-46.54.3, 2.9.7-150000.3.57.1, 2.9.14-150400.5.7.1
libxml2-doc - addressed in versions 2.9.4-46.54.3, 2.9.14-150400.5.7.1
libxml2 - update to 2.9.7-13.0.1
python3-libxml2 - update to 2.9.7-13.0.1
libxml2-devel - update to 2.9.7-13.0.1
python3-libxml2-python - update to 2.9.7-150000.3.57.1
libxml2-2-32bit-debuginfo - addressed in versions 2.9.7-150000.3.57.1, 2.9.14-150400.5.7.1
python2-libxml2-python-debuginfo - update to 2.9.7-150000.3.57.1
python2-libxml2-python - update to 2.9.7-150000.3.57.1
python3-libxml2-python-debuginfo - update to 2.9.7-150000.3.57.1
python-libxml2-python-debugsource - update to 2.9.7-150000.3.57.1
libxml2 - update to 2.9.10-26
libxml2-debuginfo - update to 2.9.10-26
libxml2-debugsource - update to 2.9.10-26
libxml2-help - update to 2.9.10-26
python3-libxml2 - update to 2.9.10-26
python2-libxml2 - update to 2.9.10-26
libxml2-devel - update to 2.9.10-26
libxml2 (Red Hat package) - update to 2.9.13-1.el9_0.1
libxml2 - addressed in versions 2.9.14-1.fc34, 2.9.14-1.fc35, 2.9.14-1.fc36
libxml2-devel-32bit - update to 2.9.14-150400.5.7.1
python3-libxml2-debuginfo - update to 2.9.14-150400.5.7.1
python3-libxml2 - update to 2.9.14-150400.5.7.1
dev-libs/libxml2 - update to 2.10.2
IBM Cloud Pak for Watson AIOps - update to 4.1.1
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.8.0.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.11.0
OpenShift Virtualization - update to 4.11.0
App Connect Enterprise Certified Container - addressed in versions 5.0.1, 5.1.0
Dell EMC VxRail Appliance - addressed in versions 7.0.372, 8.0.000
IBM Qradar SIEM - addressed in versions 7.4.3 Fix Pack 8, 7.5.0 Update Pack 4
Splunk Universal Forwarder - addressed in versions 8.1.11, 8.2.7.1, 9.0.1
RSA Authentication Manager - addressed in versions 8.7 SP1 Patch 3, 8.7 SP2 Patch 1
EMC Cloud Tiering Appliance - update to 13.2.0.2.24
Google Android - update to 14 2023-10-01
Red Hat OpenStack - update to 16.2.z
Dell Data Protection Central - update to 19.9
Chrome OS - addressed in versions 96.0.4664.215, 102.0.5005.153

• https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd
• https://gitlab.gnome.org/GNOME/libxslt/-/tags
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab
• https://packetstormsecurity.com/files/download/169825/GS20221114165129.txt

• Remote code execution in libxml2
• Remote code execution in libxslt
• Slackware Linux update for libxml2
• Ubuntu update for libxml2
• Cloud Foundry Foundation cflinuxfs3 update for Libxml2
• Debian update for libxml2
• Red Hat Enterprise Linux 8 update for libxml2
• Red Hat Enterprise Linux 9 update for libxml2
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.5
• Multiple vulnerabilities in Google ChromeOS
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Multiple vulnerabilities in Oracle Solaris
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenStack 16.2
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes
• SUSE update for libxml2
• Multiple vulnerabilities in Google Chrome OS LTS
• Multiple vulnerabilities in DELL Secure Connect Gateway Security
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in Openshift Logging 5.3
• Multiple vulnerabilities in Openshift Logging 5.2
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in Red Hat Ceph Storage 5.2
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Serverless
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.3
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP)
• Multiple vulnerabilities in Red Hat Gatekeeper Operator
• Multiple vulnerabilities in Submariner
• IBM AIX and VIOS update for libxml2
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in Dell EMC NetWorker vProxy
• Multiple vulnerabilities in OpenShift Virtualization
• Multiple vulnerabilities in Dell VxRail
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.4
• Multiple vulnerabilities in Splunk Enterprise
• Multiple vulnerabilities in Splunk Universal Forwarder
• Gentoo update for libxml2
• Multiple vulnerabilities in Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Multiple vulnerabilities in MySQL Workbench
• Multiple vulnerabilities in Tenable Nessus
• Integer overflow in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Tenable Nessus
• IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for libxml2
• Multiple vulnerabilities in Dell VxRail Appliance components
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Multiple vulnerabilities in Oracle HTTP Server
• Multiple vulnerabilities in IIBM QRadar SIEM
• SUSE update for libxml2
• SUSE update for libxml2
• Amazon Linux AMI update for libxml2
• Multiple vulnerabilities in Tenable Nessus
• Multiple vulnerabilities in Dell RecoverPoint Classic
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in Dell Data Protection Central
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in Google Android 14
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• openEuler update for libxml2
• Amazon Linux AMI update for libxml2
• Fedora 36 update for libxml2
• Fedora 35 update for libxml2
• Fedora 34 update for libxml2
• Anolis OS update for libxml2
• SecurID Authentication Manager update for third-party components
• SecurID Authentication Manager update for third-party components
• RSA Authentication Manager update for third-party components