CVE-2022-23308

28

FAUCET Score

CVE-2022-23308 is a high-severity use-after-free vulnerability affecting libxml2 versions prior to 2.9.13, impacting products from vendors such as Apple, Debian, and Oracle. This flaw, rated 7.5 CVSS, allows an unauthenticated attacker to cause a denial of service with low complexity. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 2.9.13CPE matchmatch criteria	cpe:2.3:a:xmlsoft:libxml2::::::::
		34CPE matchmatch criteria	cpe:2.3:o:fedoraproject:fedora:34:::::::*
		9.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:9.0:::::::*
		< 15.5CPE matchmatch criteria	cpe:2.3:o:apple:ipados::::::::
		< 15.5CPE matchmatch criteria	cpe:2.3:o:apple:iphone_os::::::::

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

6.01%

Probability of exploitation in next 30 days

EPSS Percentile

92.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0601 is in the 87th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (37)

github_advisorypatch availablevia nvd_reference

ivantipatch availablevia llm_extracted

Fixed in: ['8.1.11', '8.2.7.1', '9.0.1', '9.0.2205']

microsoftpatch availablevia msrc

Product: 18777-16823Fixed in: 2.9.13-1

microsoftpatch availablevia msrc

Product: cbl2 libxml2 2.9.13-1 on CBL Mariner 2.0Fixed in: 2.9.13-1

microsoftpatch availablevia msrc

Product: 18776-16820Fixed in: 2.9.13-1

microsoftpatch availablevia msrc

Product: CBL Mariner 1.0 x64Fixed in: 2.9.13-1

microsoftpatch availablevia msrc

Product: CBL Mariner 1.0 ARMFixed in: 2.9.13-1

microsoftpatch availablevia msrc

Product: CBL Mariner 2.0 x64Fixed in: 2.9.13-1

microsoftpatch availablevia msrc

Product: CBL Mariner 2.0 ARMFixed in: 2.9.13-1

microsoftpatch availablevia msrc

Product: cm1 libxml2 2.9.13-1 on CBL Mariner 1.0Fixed in: 2.9.13-1

oraclepatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-mod_security-0:2.9.2-68.GA.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-nghttp2-0:1.39.2-41.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-openssl-1:1.1.1g-11.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-openssl-chil-0:1.0.0-11.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-openssl-pkcs11-0:0.4.10-26.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apr-util-0:1.6.1-91.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-curl-0:7.78.0-3.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-httpd-0:2.4.37-80.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.16-10.Final_redhat_2.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_http2-0:1.15.7-22.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_jk-0:1.2.48-29.redhat_1.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_md-1:2.0.8-41.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_security-0:2.9.2-68.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-nghttp2-0:1.39.2-41.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.1.1g-11.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-chil-0:1.0.0-11.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-pkcs11-0:0.4.10-26.jbcs.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: libxml2-0:2.9.7-12.el8_5

redhatpatch availablevia redhat_api

Product: Text-Only JBCSFixed in: libxml2

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-apr-util-0:1.6.1-91.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-curl-0:7.78.0-3.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-httpd-0:2.4.37-80.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.16-10.Final_redhat_2.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-mod_http2-0:1.15.7-22.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-mod_md-1:2.0.8-41.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-mod_jk-0:1.2.48-29.redhat_1.el8jbcs

Vendor Advisories (4)

ivantillm-ivanti-65b8c06a140ba61eMEDIUM

August Third Party Package updates in Splunk Enterprise and Universal Forwarders

microsoft2022-Mar/CVE-2022-23308

CVE-2022-23308

redhatCVE-2022-23308Moderate

libxml2: Use-after-free of ID and IDREF attributes

microsoft2022-Feb/CVE-2022-23308Important

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

References

seclists.org / fulldisclosure/2022/May/33

Mailing ListThird Party Advisory

seclists.org / fulldisclosure/2022/May/34

Mailing ListThird Party Advisory

seclists.org / fulldisclosure/2022/May/35

Mailing ListThird Party Advisory

seclists.org / fulldisclosure/2022/May/36

Mailing ListThird Party Advisory

seclists.org / fulldisclosure/2022/May/37

Mailing ListThird Party Advisory

seclists.org / fulldisclosure/2022/May/38

Mailing ListThird Party Advisory

github.com / GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e

PatchThird Party Advisory

gitlab.gnome.org / GNOME/libxml2/-/blob/v2.9.13/NEWS

Release NotesThird Party Advisory

lists.debian.org / debian-lts-announce/2022/04/msg00004.html

Mailing ListThird Party Advisory

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF

security.gentoo.org / glsa/202210-03

Third Party Advisory

security.netapp.com / advisory/ntap-20220331-0008

Third Party Advisory

support.apple.com / kb/HT213253

Third Party Advisory

support.apple.com / kb/HT213254

Third Party Advisory

support.apple.com / kb/HT213255

Third Party Advisory

support.apple.com / kb/HT213256

Third Party Advisory

support.apple.com / kb/HT213257

Third Party Advisory

support.apple.com / kb/HT213258

Third Party Advisory

oracle.com / security-alerts/cpujul2022.html

PatchThird Party Advisory