CVE Tracker

CVE-2022-23308 @ mufasa

Status
not_applicable
Priority
7.0
Match score
4.0
Risk
DoS Remote
CVSS
7.5 HIGH
Reason
cpe: libxml2; pkgs: libxml2, libxml2-devel, libxml2-python; version: in-range: libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els2, libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els2, libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els2; risk:dos
Created
2026-10-20T18:18:09Z
Updated
2026-10-20T19:09:09Z
Closed
2026-10-20T18:38:31Z

Package interrogation (copy)

Run on the host — click to copy a command. RPM

PackageCommands
libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els2
libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els2
libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els2
alt-libxml2-2.10.2-9.el7
alt-python27-libxml2-2.9.2-4.1.el7
ea-libxml2-2.15.4-1.el7.cloudlinux

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Clear

Suggestions: libxml2 · libxml2-devel · libxml2-python

SystemMatchesTicket for CVE-2022-23308
morris alt-libxml2-devel 2.10.2; libxml2-devel 2.9.1 not_applicable open
mufasa libxml2-devel 2.9.1 not_applicable open

Related CVE (same fix)

This CVE is subordinated to primary CVE-2021-3518 — same product as CVE-2021-3518

Host OS / kernel

OS
CloudLinux release 7.9 (Boris Yegorov) (7.9) · cloudlinux
Arch
x86_64
kernel_release
uname -r → 3.10.0-962.3.2.lve1.5.89.el7.x86_64
kernel_version
uname -v → #1 SMP Thu Jul 9 15:55:31 UTC 2026

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Same CVE on other hosts

Open the ticket for this CVE on another system.

System Status Priority Updated
morris not_applicable 7.0 2026-10-20T19:09:09Z Open
Library not_applicable 1.75 2026-10-20T19:09:09Z Open
Archive not_applicable 0.62 2026-10-20T19:09:09Z Open
Janus not_applicable 0.62 2026-10-20T19:09:09Z Open
Saiph not_applicable 0.62 2026-10-20T19:09:09Z Open

Description

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Determination

Related to primary CVE-2021-3518: same product as CVE-2021-3518

Update status

Also apply to other systems with this CVE:

Add note only

Also add note on:

Mitigation log

2026-10-20T18:38:31Z — not_applicable
Related to primary CVE-2021-3518: same product as CVE-2021-3518

References

NVD: CVE-2022-23308