Summary
Ivan Fratric discovered that Libxslt did not correctly handle certain
memory operations. An attacker could possibly use this issue to execute
arbitrary code or cause a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libxslt | 1.1.28-2ubuntu0.2+esm4 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libxslt | 1.1.28-2.1ubuntu0.3+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libxslt | 1.1.29-5ubuntu0.3+esm2 |
Vulnerabilities 2
-
High 7.8
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
-
High 7.8
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can…