Summary
It was discovered that libxslt could be made to expose sensitive
information about address space layout. An attacker could possibly use this
issue to bypass Address Space Layout Randomization (ASLR) protections.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libxslt | 1.1.34-4ubuntu0.22.04.4 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libxslt | 1.1.28-2ubuntu0.2+esm3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libxslt | 1.1.28-2.1ubuntu0.3+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libxslt | 1.1.29-5ubuntu0.3+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libxslt | 1.1.34-4ubuntu0.20.04.3+esm1 |
Vulnerabilities 1
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and…
References
-
report
https://ubuntu.com/security/CVE-2023-40403