CVE-2022-29824: Integer Overflow
A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer types. A substantial input causes values to calculate buffer sizes to overflow, resulting in an out-of-bounds write.
Other sources
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libxml2to a version that resolves this vulnerability.Fixed in 0:2.9.7-13.el8_6.1 - Upgrade
Upgrade
redhat/libxml2to a version that resolves this vulnerability.Fixed in 0:2.9.13-1.el9_0.1 - Upgrade
Upgrade
debian/libxml2to a version that resolves this vulnerability.Fixed in 2.9.14+dfsg-1Fixed in 2.9.10+dfsg-6.7+deb11u2Fixed in 2.9.4+dfsg1-7+deb10u4 - Upgrade
Upgrade
debian/libxml2to a version that resolves this vulnerability.Fixed in 2.9.4+dfsg1-7+deb10u4Fixed in 2.9.4+dfsg1-7+deb10u6Fixed in 2.9.10+dfsg-6.7+deb11u4Fixed in 2.9.14+dfsg-1.3~deb12u1Fixed in 2.9.14+dfsg-1.3 - Upgrade
Upgrade
redhat/libxml2to a version that resolves this vulnerability.Fixed in 2.9.14 - Upgrade
Upgrade
libxml2to a version that resolves this vulnerability.Fixed in 2.9.14 - Upgrade
Upgrade
libxsltto a version that resolves this vulnerability.Fixed in 1.1.35 - Compensating control
Avoid passing large inputs to the libxml2 library (the issue can be triggered via substantial/multi-gigabyte XML inputs).
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2022-29824?
CVE-2022-29824 is a vulnerability in the libxml2 library that can result in out-of-bounds memory writes.
How severe is CVE-2022-29824?
CVE-2022-29824 has a severity rating of 7.4, indicating a high severity.
Which software is affected by CVE-2022-29824?
The libxml2 library versions before 2.9.14 are affected by CVE-2022-29824.
How can I fix CVE-2022-29824?
To fix CVE-2022-29824, update to libxml2 version 2.9.14 or later.
Where can I find more information about CVE-2022-29824?
More information about CVE-2022-29824 can be found in the references provided: [reference 1], [reference 2], [reference 3].