Wind River Support Network

HomeDefectsLINCD-8298

Fixed

LINCD-8298 : Security Advisory - libxml2 - CVE-2022-23308

Created: Feb 20, 2022 Updated: Mar 31, 2022

Resolved Date: Mar 17, 2022

Found In Version: 10.20.6.0

Fix Version: 10.22.13.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Userspace

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

https://nvd.nist.gov/vuln/detail/CVE-2022-23308