1881 matches found
Slackware: Security Advisory (SSA:2025-072-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-24855
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...
UBUNTU-CVE-2024-55549
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...
CVE-2025-24855
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...
[slackware-security] libxslt
New libxslt packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxslt-1.1.43-i586-1slack15.0.txz: Upgraded. This update addresses some security issues. Fix use-after-free of XPath context node. F...
Slackware Linux 15.0 / current libxslt Multiple Vulnerabilities (SSA:2025-072-01)
The version of libxslt installed on the remote host is prior to 1.1.43. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-072-01 advisory. New libxslt packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
libxslt -- multiple vulnerabilities
CVE-2024-55549 Fix UAF related to excluded namespaces xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CVE-2025-24855 Fix use-after-free of XPath context node numbers.c in libxslt before 1.1.43 has a use-after-free because , in...
Linux Distros Unpatched Vulnerability : CVE-2013-4520
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service crash via a stylesheet that embeds a DTD, which causes a structu...
Linux Distros Unpatched Vulnerability : CVE-2016-1841
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code ...
Linux Distros Unpatched Vulnerability : CVE-2016-1683
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of...
Linux Distros Unpatched Vulnerability : CVE-2019-11068
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error...
Linux Distros Unpatched Vulnerability : CVE-2012-6139
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libxslt before 1.1.28 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an 1 empty match attribute in a XSL key to the...
Linux Distros Unpatched Vulnerability : CVE-2016-1684
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attacke...
Linux Distros Unpatched Vulnerability : CVE-2011-1202
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote...
Advisory ROSA-SA-2025-2711
Software: libxslt 1.1.32 OS: ROSA Virtualization 3.0 packageevrstring: libxslt-1.1.32 CVE-ID: CVE-2019-11068 BDU-ID: 2019-04263 CVE-Crit: CRITICAL. CVE-DESC.: An XSLT C vulnerability in the libxslt library is related to access control flaws. Exploitation of the vulnerability could allow an attack...
PT-2025-11227
Name of the Vulnerable Software and Affected Versions: libxslt versions prior to 1.1.43 Description: The issue is related to a use-after-free error in the numbers.c file of libxslt. This occurs during nested XPath evaluations, where an XPath context node can be modified but never restored. The...
PT-2025-11225
Name of the Vulnerable Software and Affected Versions libxslt versions prior to 1.1.43 libxslt versions 1.1.34-4ubuntu0.20.04.2 libxslt versions 1.1.35-1+deb12u1 Description libxslt is a library used for transforming XML files into other formats using XSLT. A use-after-free issue exists in the...
CentOS 7 : libxslt (RHSA-2020:4005)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4005 advisory. - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving ...