Wind River Support Network

HomeDefectsLIN1021-2872

Fixed

LIN1021-2872 : Security Advisory - libxml2 - CVE-2022-23308

Created: Feb 20, 2022 Updated: May 31, 2022

Resolved Date: May 10, 2022

Found In Version: 10.21.20.1

Fix Version: 10.21.20.13

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

https://nvd.nist.gov/vuln/detail/CVE-2022-23308