CVE-2023-45322
libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."
- T
Tim Bastin detected CVE-2023-45322 with a risk of 3.8
System updated the risk assessment to 1.9
System recalculated raw risk assessment
- T
Tim Bastin detected CVE-2023-45322 with a risk of 1.9
System updated the risk assessment from 1.9 to 1.26
System recalculated raw risk assessment
System updated the risk assessment from 1.26 to 3.8
System recalculated raw risk assessment
System updated the risk assessment from 1.9 to 3.8
System recalculated raw risk assessment
- T
Tim Bastin detected CVE-2023-45322 with a risk of 3.8
- T
Tim Bastin detected CVE-2023-45322 with a risk of 3.8
System fixed CVE-2023-45322
System fixed CVE-2023-45322
System fixed CVE-2023-45322
System fixed CVE-2023-45322
System detected CVE-2023-45322 with a risk of 3.8
Add a comment
Affected component
debian/libxml2