Lucene search

K
freebsdFreeBSDECC268F2-8FC2-11E5-918C-BCAEC565249C
HistoryOct 29, 2015 - 12:00 a.m.

libxslt -- DoS vulnerability due to type confusing error

2015-10-2900:00:00
vuxml.freebsd.org
15

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.023 Low

EPSS

Percentile

89.6%

libxslt maintainer reports:

CVE-2015-7995:
http://www.openwall.com/lists/oss-security/2015/10/27/10
We need to check that the parent node is an element before
dereferencing its namespace.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibsxlt<Β 1.1.28_8UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.023 Low

EPSS

Percentile

89.6%