CVE:CVE-2019-20388
CNNVD:CNNVD-202001-963
libxml2是开源的一个用来解析XML文档的函数库。它用C语言写成，并且能为多种语言所调用，例如C语言，C++，XSH。
libxml2 2.9.10版本中的xmlschemas.c文件的xmlSchemaPreRun存在安全漏洞。攻击者可利用该漏洞造成内存泄露。
solution:Upgrade xmlsoft libxml2 to a higher version than 2.9.10,and avoid the version 2.9.10; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp plug-in_for_symantec_netbackup to a higher version than -; Upgrade netapp smi-s_provider to a higher version than -; Upgrade netapp snapdrive to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp baseboard_management_controller_h300s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h500s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h700s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h300e_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h500e_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h700e_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h410s_firmware to a higher version than -; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.4.0.0,13.5.0.0,and avoid the version 13.4.0.0,13.5.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle mysql_workbench to a higher version than 8.0.26,and avoid the version (,8.0.26]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.58,and avoid the version 8.58; Upgrade oracle real_user_experience_insight to a higher version than 13.3.1.0,13.4.1.0,13.5.1.0,and avoid the version 13.3.1.0,13.4.1.0,13.5.1.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade fedoraproject fedora to a higher version than 30,31,32,and avoid the version 30,31,32