libxslt vulnerability

2013-04-0200:00:00

ubuntu.com

9.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.143 Low

EPSS

Percentile

95.6%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10
Ubuntu 10.04
Ubuntu 8.04

Packages

libxslt - XSLT processing library

Details

Nicholas Gregoire discovered that libxslt incorrectly handled certain empty
values. If a user or automated system were tricked into processing a
specially crafted XSLT document, a remote attacker could cause libxslt to
crash, causing a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibxslt1.1< 1.1.22-1ubuntu1.4UNKNOWN
Ubuntu8.04noarchlibxslt1-dbg< 1.1.22-1ubuntu1.4UNKNOWN
Ubuntu8.04noarchlibxslt1-dev< 1.1.22-1ubuntu1.4UNKNOWN
Ubuntu8.04noarchpython-libxslt1< 1.1.22-1ubuntu1.4UNKNOWN
Ubuntu8.04noarchpython-libxslt1-dbg< 1.1.22-1ubuntu1.4UNKNOWN
Ubuntu8.04noarchxsltproc< 1.1.22-1ubuntu1.4UNKNOWN
Ubuntu12.10noarchlibxslt1.1< 1.1.26-14ubuntu0.1UNKNOWN
Ubuntu12.10noarchlibxslt1-dbg< 1.1.26-14ubuntu0.1UNKNOWN
Ubuntu12.10noarchlibxslt1-dev< 1.1.26-14ubuntu0.1UNKNOWN
Ubuntu12.10noarchpython-libxslt1< 1.1.26-14ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	libxslt1.1	< 1.1.22-1ubuntu1.4	UNKNOWN
Ubuntu	8.04	noarch	libxslt1-dbg	< 1.1.22-1ubuntu1.4	UNKNOWN
Ubuntu	8.04	noarch	libxslt1-dev	< 1.1.22-1ubuntu1.4	UNKNOWN
Ubuntu	8.04	noarch	python-libxslt1	< 1.1.22-1ubuntu1.4	UNKNOWN
Ubuntu	8.04	noarch	python-libxslt1-dbg	< 1.1.22-1ubuntu1.4	UNKNOWN
Ubuntu	8.04	noarch	xsltproc	< 1.1.22-1ubuntu1.4	UNKNOWN
Ubuntu	12.10	noarch	libxslt1.1	< 1.1.26-14ubuntu0.1	UNKNOWN
Ubuntu	12.10	noarch	libxslt1-dbg	< 1.1.26-14ubuntu0.1	UNKNOWN
Ubuntu	12.10	noarch	libxslt1-dev	< 1.1.26-14ubuntu0.1	UNKNOWN
Ubuntu	12.10	noarch	python-libxslt1	< 1.1.26-14ubuntu0.1	UNKNOWN