CVE-2019-13118

🗓️ 01 Jul 2019 01:27:39Reported by mitreType

Vulnerability in libxslt 1.1.33 allows for uninitialized stack data read

Reporter	Title	Published	Views	Family All 124
ATTACKERKB	CVE-2019-13118	1 Jul 201902:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : java-11-amazon-corretto (ALAS-2020-1387)	21 Jan 202000:00	–	nessus
Tenable Nessus	Amazon Corretto Java 8.x < 8.242.07.1 Multiple Vulnerabilities	1 Apr 202200:00	–	nessus
Tenable Nessus	Apple TV < 12.4 Multiple Vulnerabilities	26 Jul 201900:00	–	nessus
Tenable Nessus	Apple iOS < 12.4 Multiple Vulnerabilities	23 Jul 201900:00	–	nessus
Tenable Nessus	Debian DLA-1860-1 : libxslt security update	23 Jul 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : libxslt (EulerOS-SA-2019-1913)	16 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : libxslt (EulerOS-SA-2019-1929)	17 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : libxslt (EulerOS-SA-2019-2032)	24 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libxslt (EulerOS-SA-2019-2519)	4 Dec 201900:00	–	nessus

NVD

Node

xmlsoft libxsltMatch1.1.33

Node

opensuse leapMatch15.1

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp cloud_backupMatch-

netapp clustered_data_ontapMatch-

netapp e-series_performance_analyzerMatch-

netapp e-series_santricity_management_plug-insMatch-vmware_vcenter

netapp e-series_santricity_os_controllerRange11.0–11.50.2

netapp e-series_santricity_storage_managerMatch-

netapp e-series_santricity_web_servicesMatch-web_services_proxy

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp ontap_select_deploy_administration_utilityMatch-

netapp plug-in_for_symantec_netbackupMatch-

netapp santricity_unified_managerMatch-

netapp steelstore_cloud_integrated_storageMatch-

Node

oracle jdkMatch1.8.0update231

Node

fedoraproject fedoraMatch31

Node

canonical ubuntu_linuxMatch12.04-

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch16.04esm

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.04

canonical ubuntu_linuxMatch19.10

Node

apple icloudRange<7.13windows

apple icloudRange10.0–10.6windows

apple itunesRange<12.9.6windows

apple iphone_osRange<12.4

apple mac_os_xMatch10.12.6security_update_2019-001

apple mac_os_xMatch10.12.6security_update_2019-002

apple mac_os_xMatch10.12.6security_update_2019-003

apple mac_os_xMatch10.13.6security_update_2019-001

apple mac_os_xMatch10.13.6security_update_2019-002

apple mac_os_xMatch10.13.6security_update_2019-003

apple macosRange10.4.6–10.14.6

apple tvosRange<12.4

Source	Link
seclists	www.seclists.org/bugtraq/2019/Jul/40
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
seclists	www.seclists.org/fulldisclosure/2019/Aug/11
seclists	www.seclists.org/bugtraq/2019/Aug/22
support	www.support.apple.com/kb/HT210357
usn	www.usn.ubuntu.com/4164-1/
bugs	www.bugs.chromium.org/p/oss-fuzz/issues/detail
seclists	www.seclists.org/bugtraq/2019/Jul/41
lists	www.lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html
seclists	www.seclists.org/fulldisclosure/2019/Aug/14

28 May 2026 19:16Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25

CVSS 3.15.3

EPSS0.01008

SSVC

CWE-843