Summary
Ivan Fratric discovered that Libxslt incorrectly handled certain memory
operations when handling documents. A remote attacker could use this issue
to cause Libxslt to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libxslt | 1.1.34-4ubuntu0.20.04.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | libxslt | 1.1.34-4ubuntu0.22.04.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | libxslt | 1.1.39-0exp1ubuntu0.24.04.2 |
Vulnerabilities 1
-
High 7.8
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can…
References
-
report
https://ubuntu.com/security/CVE-2025-24855