Summary
Ivan Fratric discovered that Libxslt incorrectly handled certain memory
operations when handling documents. A remote attacker could use this issue
to cause Libxslt to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libxslt | 1.1.34-4ubuntu0.20.04.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | libxslt | 1.1.34-4ubuntu0.22.04.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | libxslt | 1.1.39-0exp1ubuntu0.24.04.1 |
Vulnerabilities 1
-
High 7.8
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
References
-
report
https://ubuntu.com/security/CVE-2024-55549