CVE:CVE-2022-29824
CNNVD:CNNVD-202205-1926
libxslt是一款XSLT（用于定义XML转换的XML语言）C库。libxml2是开源的一个用来解析XML文档的函数库。它用C语言写成，并且能为多种语言所调用，例如C语言，C++，XSH。
libxml2 2.9.14之前版本和 libxslt 1.1.35之前版本存在输入验证错误漏洞，该漏洞源于buf.c(xmlBuf*)和tree.c(xmlBuffer*)中的几个缓冲区处理函数不检查整数溢出，导致超出范围的内存写入。
solution:Upgrade xmlsoft libxml2 to a higher version than 2.9.14,and avoid the version (,2.9.14); Upgrade xmlsoft libxslt to a higher version than 1.1.35,and avoid the version (,1.1.35]; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp clustered_data_ontap_antivirus_connector to a higher version than -; Upgrade netapp manageability_software_development_kit to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp smi-s_provider to a higher version than -; Upgrade netapp snapdrive to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -