Lucene search

K
ubuntuUbuntuUSN-4164-1
HistoryOct 22, 2019 - 12:00 a.m.

Libxslt vulnerabilities

2019-10-2200:00:00
ubuntu.com
73

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.3%

Releases

  • Ubuntu 19.10
  • Ubuntu 19.04
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • libxslt - XSLT processing library

Details

It was discovered that Libxslt incorrectly handled certain documents.
An attacker could possibly use this issue to access sensitive information.
This issue not affected Ubuntu 19.10. (CVE-2019-13117, CVE-2019-13118)

It was discovered that Libxslt incorrectly handled certain documents.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2019-18197)

OSVersionArchitecturePackageVersionFilename
Ubuntu19.10noarchlibxslt1.1< 1.1.33-0ubuntu1.1UNKNOWN
Ubuntu19.10noarchlibxslt1-dev< 1.1.33-0ubuntu1.1UNKNOWN
Ubuntu19.10noarchlibxslt1.1-dbgsym< 1.1.33-0ubuntu1.1UNKNOWN
Ubuntu19.10noarchpython-libxslt1< 1.1.33-0ubuntu1.1UNKNOWN
Ubuntu19.10noarchpython-libxslt1-dbg< 1.1.33-0ubuntu1.1UNKNOWN
Ubuntu19.10noarchxsltproc< 1.1.33-0ubuntu1.1UNKNOWN
Ubuntu19.10noarchxsltproc-dbgsym< 1.1.33-0ubuntu1.1UNKNOWN
Ubuntu19.04noarchlibxslt1.1< 1.1.32-2ubuntu0.2UNKNOWN
Ubuntu19.04noarchlibxslt1-dev< 1.1.32-2ubuntu0.2UNKNOWN
Ubuntu19.04noarchlibxslt1.1-dbgsym< 1.1.32-2ubuntu0.2UNKNOWN
Rows per page:
1-10 of 491

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.3%