Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 22 products
🚨 HIGH severity CVE-2022-50998 (CVSS 7.5) Nokogiri <1.13.9 bundles vulnerable libxml2 v2.9.14. Crafted XML input may cause DoS or memory corruption via CVE-2022-40304 & CVE-2022-40303. Update to v1.13.9+ immediately. #CVE #PatchNow https://t.co/QTGHOykQVN
Post summary
The tweet announces a high‑severity vulnerability in Nokogiri and libxml2, provides technical details, and urges users to apply the available patch (v1.13.9+).
22 of 22 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | watchos | - | - | - |
| App | netapp | active_iq_unified_manager | - | vsphere | - |
| App | netapp | clustered_data_ontap | - | - | - |
| App | netapp | clustered_data_ontap_antivirus_connector | - | - | - |
| HW | netapp | h300s | - | - | - |
| OS | netapp | h300s_firmware | - | - | - |
| HW | netapp | h410c | - | - | - |
| OS | netapp | h410c_firmware | - | - | - |
| HW | netapp | h410s | - | - | - |
| OS | netapp | h410s_firmware | - | - | - |
| HW | netapp | h500s | - | - | - |
| OS | netapp | h500s_firmware | - | - | - |
| HW | netapp | h700s | - | - | - |
| OS | netapp | h700s_firmware | - | - | - |
| App | netapp | netapp_manageability_sdk | - | - | - |
| App | netapp | ontap_select_deploy_administration_utility | - | - | - |
| App | netapp | snapmanager | - | hyper-v | - |
| App | xmlsoft | libxml2 | - | - | - |