Lucene search

K
archlinuxArch LinuxASA-201601-8
HistoryJan 13, 2016 - 12:00 a.m.

libxslt: denial of service

2016-01-1300:00:00
Arch Linux
lists.archlinux.org
24

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.023 Low

EPSS

Percentile

88.5%

A type confusion vulnerability was discovered in the
xsltStylePreCompute() function of libxslt. A remote attacker could
possibly exploit this flaw to cause an application using libxslt to
crash by tricking the application into processing a specially crafted
XSLT document.

OSVersionArchitecturePackageVersionFilename
anyanyanylibxslt<Β 1.1.28-4UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.023 Low

EPSS

Percentile

88.5%