libxslt CVE-2019-11068 Security Bypass Vulnerability

🗓️ 10 Apr 2019 00:00:00Reported by Symantec Security ResponseType

libxslt CVE-2019-11068 Security Bypass Vulnerability in XMLSoft libxslt 1.1.33 and below for Oracle JDK, Oracle JRE, Redhat, and other technologies. Recommendations include blocking external access, running software as nonprivileged user, and deploying NIDS

Reporter	Title	Published	Views	Family All 220
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by libxslt vulnerabilities (CVE-2019-11068, CVE-2019-18197)	3 Mar 202116:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities.	19 Jul 202221:43	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.	21 Feb 202204:39	–	ibm
FreeBSD	libxslt -- security framework bypass	10 Apr 201900:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : libxslt (ALAS-2020-1535)	28 Oct 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libxslt (ALAS-2019-1241)	26 Jul 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libxslt (ALAS-2020-1464) (deprecated)	19 Dec 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libxslt (ALAS-2021-1463)	14 Jan 202100:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0062: libxslt (ALINUX3-SA-2022:0062)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libxslt (ALSA-2020:4464)	9 Feb 202200:00	–	nessus

Source	Link
gitlab	www.gitlab.gnome.org/GNOME/libxslt/commit/e03553605b45c88f0b4b2980adfbbb8f6fca2fd6
access	www.access.redhat.com/security/cve/CVE-2019-11068
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
xmlsoft	www.xmlsoft.org/XSLT/

10 Apr 2019 00:00Current

0.5Low risk

Vulners AI Score0.5

EPSS0.01127