{"id":"CVE-2023-45322","aliases":["AZL-31272","AZL-34960","BELL-CVE-2023-45322","CLSA-2026-1775731413","CLSA-2026-1781534276","CLSA-2026-1781607534","CLSA-2026-1781619427","DEBIAN-CVE-2023-45322","DLA-4064-1","DSA-5949-1","EUVD-2023-49616","GHSA-vqpg-m25j-7558","JLSEC-2025-82","MGASA-2023-0298","OESA-2023-1742","SUSE-SU-2023:4464-1","SUSE-SU-2023:4504-1","SUSE-SU-2023:4505-1","SUSE-SU-2023:4537-1","openSUSE-SU-2024:13426-1"],"status":"disputed","title":"** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain...","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00965,"percentile":0.61935,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-10-06T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libxml2","fixed_in":["2.10.4-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libxml2","fixed_in":["2.11.5-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libxml2","fixed_in":["2.12.3-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","fixed_in":["2.12.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libxml2","fixed_in":["2.9.10-7.9.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libxml2","fixed_in":["2.10.4-1.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libxml2","fixed_in":["2.9.10-36.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libxml2","fixed_in":["2.9.10-38.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libxml2","fixed_in":["2.9.14-9.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"libxml2","fixed_in":["2.9.14-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"libxml2","fixed_in":["2.9.14-9.oe2203sp2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","fixed_in":["2.9.7-150000.3.63.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","fixed_in":["2.9.7-150000.3.63.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.63.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.63.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.63.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","fixed_in":["2.10.3-150500.5.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2","fixed_in":["2.10.3-150500.5.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libxml2","fixed_in":["2.10.3-150500.5.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libxml2","fixed_in":["2.9.4-46.68.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libxml2","fixed_in":["2.9.4-46.68.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-libxml2","fixed_in":["2.9.4-46.68.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libxml2","fixed_in":["2.9.4-46.68.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-libxml2","fixed_in":["2.9.4-46.68.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libxml2","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libxml2","fixed_in":["2.11.5-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.12.3-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.12.3-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.7+deb11u6"}]}],"versions":["2.9.10+dfsg-6.7","2.9.10+dfsg-6.7+deb11u1","2.9.10+dfsg-6.7+deb11u2","2.9.10+dfsg-6.7+deb11u3","2.9.10+dfsg-6.7+deb11u4","2.9.10+dfsg-6.7+deb11u5"],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"],"bundled":10},{"source":"osv","ecosystem":"Mageia:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-7.9.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-1.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-36.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-38.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-9.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-9.oe2203sp2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.63.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.63.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.63.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.63.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.63.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.11.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.11.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.68.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.68.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.68.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.68.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.68.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-2.1"}]}]}],"products":[{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/583","tags":["x_transferred","Issue Tracking","Patch","Vendor Advisory","report","web"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/344","tags":["x_transferred","Issue Tracking","Patch","Vendor Advisory","report","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/06/5","tags":["mailing-list","x_transferred","Mailing List","Patch","Third Party Advisory","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45322","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-vqpg-m25j-7558"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-45322","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1775731413.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1781534276.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9714","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1781607534.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1781619427.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45322.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-45322","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0298.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32364","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/10/06/5","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1742","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234464-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216129","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45322","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234504-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234505-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234537-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-45322","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","status":"disputed","published":"2023-10-06T00:00:00Z","modified":"2026-10-14T23:51:53.501Z","updated_at":"2026-11-02T14:35:22.984825Z"}],"euvd":[{"id":"EUVD-2023-49616","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","status":"published","published":"2023-10-06T00:00:00Z","modified":"2026-10-14T23:51:53Z","updated_at":"2026-11-02T17:27:11.209168Z"}],"ghsa":[{"id":"GHSA-vqpg-m25j-7558","title":"** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain...","description":"** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","status":"published","published":"2023-10-07T00:30:25Z","modified":"2026-10-15T00:30:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:13:29.914076Z"}],"nvd":[{"id":"CVE-2023-45322","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","status":"disputed","published":"2023-10-06T22:15:11.66Z","modified":"2026-10-15T00:16:38.26Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:08:36.656095Z"}],"osv":[{"id":"AZL-31272","title":"CVE-2023-45322 affecting package libxml2 for versions less than 2.10.4-2","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","status":"published","published":"2023-10-06T22:15:11Z","modified":"2026-04-21T04:26:12.089021Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-34960","title":"CVE-2023-45322 affecting package libxml2 for versions less than 2.11.5-3","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","status":"published","published":"2023-10-06T22:15:11Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"BELL-CVE-2023-45322","status":"published","published":"2023-10-06T22:15:00Z","modified":"2026-01-26T09:35:33.019976Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"DEBIAN-CVE-2023-45322","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","status":"published","published":"2023-10-06T22:15:11.66Z","modified":"2026-10-26T18:02:49.343543826Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"JLSEC-2025-82","title":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation...","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","status":"withdrawn","published":"2025-10-17T17:40:51.659Z","modified":"2026-07-25T18:23:44.487432757Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2023-1742","title":"libxml2 security update","description":"This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.\r\n\r\nSecurity Fix(es):\r\n\r\n** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor\u0026apos;s position is \u0026quot;I don\u0026apos;t think these issues are critical enough to warrant a CVE ID ... because an attacker typically can\u0026apos;t control when memory allocations fail.\u0026quot;(CVE-2023-45322)","status":"published","published":"2023-10-20T11:06:11Z","modified":"2026-08-18T01:17:55.029477992Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"CLSA-2026-1775731413","title":"libxml2: Fix of 8 CVEs","description":"- CVE-2023-45322: fix use-after-free in xmlStaticCopyNodeList when copying DTDs\n- CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint\n- CVE-2025-6170: fix potential buffer overflows in xmllint interactive shell\n- CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries\n- CVE-2026-0989: add RelaxNG include recursion limit\n- CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI\n- CVE-2026-0992: ignore repeated nextCatalog entries in XML catalog parsing\n- CVE-2026-1757: fix memory leak in xmllint interactive shell","status":"published","published":"2026-04-09T10:43:37Z","modified":"2026-06-01T00:32:46.811894925Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1781534276","title":"libxml2: Fix of 12 CVEs","description":"- CVE-2023-29469: guard xmlDictComputeFastKey against namelen \u003c= 0 to prevent\n  out-of-bounds read when hashing zero-length or negative-length keys\n- CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered\n  by malformed XML when default error handler interacts with freed memory\n- CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it\n  cannot overread the buffer when scanning for newline / carriage-return\n- CVE-2025-9714: keep and restore XPath context depth across recursive\n  xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack\n  overflow when the recursion limit was being reset prematurely","status":"published","published":"2026-06-29T10:41:06Z","modified":"2026-10-26T09:31:54.504328039Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781607534","title":"libxml2: Fix of 12 CVEs","description":"- CVE-2023-29469: guard xmlDictComputeFastKey against namelen \u003c= 0 to prevent\n  out-of-bounds read when hashing zero-length or negative-length keys\n- CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered\n  by malformed XML when default error handler interacts with freed memory\n- CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it\n  cannot overread the buffer when scanning for newline / carriage-return\n- CVE-2025-9714: keep and restore XPath context depth across recursive\n  xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack\n  overflow when the recursion limit was being reset prematurely","status":"published","published":"2026-06-29T10:51:43Z","modified":"2026-10-26T09:31:58.132002561Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781619427","title":"libxml2: Fix of 4 CVEs","description":"- CVE-2023-29469: guard xmlDictComputeFastKey against namelen \u003c= 0 to prevent\n  out-of-bounds read when hashing zero-length or negative-length keys\n- CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered\n  by malformed XML when default error handler interacts with freed memory\n- CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it\n  cannot overread the buffer when scanning for newline / carriage-return\n- CVE-2025-9714: keep and restore XPath context depth across recursive\n  xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack\n  overflow when the recursion limit was being reset prematurely","status":"published","published":"2026-07-07T15:41:38Z","modified":"2026-10-26T09:31:41.652386338Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CVE-2023-45322","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\"","status":"published","published":"2023-10-06T00:00:00Z","modified":"2026-10-28T02:31:04.376038435Z","updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"DLA-4064-1","title":"libxml2 - security update","status":"published","published":"2025-02-22T00:00:00Z","modified":"2026-03-09T01:20:30.558703Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5949-1","title":"libxml2 - security update","status":"published","published":"2025-06-26T00:00:00Z","modified":"2026-03-09T02:09:32.257423Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2023-0298","title":"Updated libxml2 packages fix a security vulnerability","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a\ncertain memory allocation fails. This occurs in xmlUnlinkNode in tree.c.\n(CVE-2023-45322)\n","status":"published","published":"2023-10-22T21:04:51Z","modified":"2026-04-16T04:44:22.376664656Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13426-1","title":"libxml2-2-2.11.5-2.1 on GA media","description":"These are all security issues fixed in the libxml2-2-2.11.5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:43:17.569122Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2023:4464-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129).\n","status":"published","published":"2023-11-16T16:56:25Z","modified":"2026-02-04T03:44:40.751802Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4504-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129).\n","status":"published","published":"2023-11-21T12:28:18Z","modified":"2026-02-04T03:22:30.870181Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4505-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129).\n","status":"published","published":"2023-11-21T12:30:58Z","modified":"2026-02-04T03:48:03.800632Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4537-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129).\n","status":"published","published":"2023-11-23T08:35:32Z","modified":"2026-02-04T04:00:54.728998Z","updated_at":"2026-11-02T15:53:53.865042Z"}]}}