PT-2022-11606 · Libxml2+2 · Libxml2+2
CVE-2021-42522
·
Published
2022-08-25
·
Updated
2023-07-18
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Anjuta (affected versions not specified)
Description
The issue is caused by the incorrect use of the libxml2 API in the anjuta/plugins/document-manager/anjuta-bookmarks.c file. Specifically, the vendor forgot to call
g free() to release the return value of xmlGetProp(), leading to an information disclosure problem.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Anjuta
Debian
Libxml2