CVE-2022-23308

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

• xmlsoft libxml2 (< 2.9.13) • fedoraproject fedora 34 • debian debian linux 9.0 • apple ipados (< 15.5) • apple iphone os (< 15.5) • apple mac os x (>= 10.15.0 < 10.15.7) • apple mac os x 10.15.7 • apple macos (>= 11.6.0 < 11.6.6) • apple macos (>= 12.0 < 12.4) • apple tvos (< 15.5) • apple watchos (< 8.6) • netapp active iq unified manager • netapp clustered data ontap • netapp clustered data ontap antivirus connector • netapp manageability software development kit • netapp ontap select deploy administration utility • netapp smi-s provider • netapp snapdrive • netapp snapmanager • netapp solidfire\, enterprise sds \& hci storage node • netapp solidfire \& hci management node • netapp bootstrap os • netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h300e firmware • netapp h500e firmware • netapp h700e firmware • netapp h410s firmware • netapp h410c firmware • oracle communications cloud native core binding support function 22.2.0 • oracle communications cloud native core network function cloud native environment 22.1.0 • oracle communications cloud native core network repository function 22.1.2 • oracle communications cloud native core network repository function 22.2.0 • oracle communications cloud native core network slice selection function 22.1.1 • oracle communications cloud native core unified data repository 22.2.0 • oracle mysql workbench (<= 8.0.29) • oracle zfs storage appliance kit 8.8