PT-2017-16267

🗓️ 09 Mar 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

Integer overflow in libxslt xsltAddTextString allows out-of-bounds write; affects several versions including libxslt 1.1.29, Chrome pre-57.0.2987.98, Android Chrome pre-57.0.2987.108, and Nokogiri pre-1.7.2.

Reporter	Title	Published	Views	Family All 5420
zdt	libxml2 xmlBufAdd Heap Buffer Overflow Exploit	2 Jun 202200:00	–	zdt
zdt	libxml2 xmlParseNameComplex Integer Overflow Vulnerability	16 Nov 202200:00	–	zdt
Rockylinux	libxml2 security update	18 May 202105:36	–	rocky
Rockylinux	libxml2 security update	29 Jun 202113:42	–	rocky
Rockylinux	libxml2 security update	15 Mar 202209:12	–	rocky
Rockylinux	zlib security update	28 Apr 202214:07	–	rocky
Rockylinux	rsync security update	11 May 202213:23	–	rocky
Rockylinux	libxml2 security update	28 Jun 202208:27	–	rocky
Rockylinux	libxml2 security update	28 Jun 202210:52	–	rocky
Rockylinux	java-11-openjdk security, bug fix, and enhancement update	21 Jul 202213:41	–	rocky

Source	Link
suse	www.suse.com/security/cve/CVE-2018-8048
chromereleases	www.chromereleases.googleblog.com/2017/02/stable-channel-update-for-desktop.html
osv	www.osv.dev/vulnerability/MGASA-2017-0111
ubuntu	www.ubuntu.com/security/CVE-2017-5040
suse	www.suse.com/security/cve/CVE-2015-8317
securitytracker	www.securitytracker.com/id/1038157
suse	www.suse.com/security/cve/CVE-2019-11068
suse	www.suse.com/security/cve/CVE-2019-20388
chromereleases	www.chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html
suse	www.suse.com/security/cve/CVE-2021-41098

13 Mar 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.18.8 - 9.8

CVSS 210

CVSS 37.5 - 9.8

EPSS0.81039

SSVC