Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-2893
HistorySep 26, 2012 - 12:00 a.m.

CVE-2012-2893

2012-09-2600:00:00
ubuntu.com
ubuntu.com
12

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON

Double free vulnerability in libxslt, as used in Google Chrome before
22.0.1229.79, allows remote attackers to cause a denial of service or
possibly have unspecified other impact via vectors related to XSL
transforms.

Notes

Author Note
seth-arnold confirmed Revision 154331 code exists in libxslt standalone package in 12.04 LTS
jdstrand mdeslaur provided the update for libxslt
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 3.0.1271.97-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchchromium-browser< 3.0.1271.97-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchchromium-browser< 3.0.1271.97-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchchromium-browser< 3.0.1271.97-0ubuntu0.12.10.1UNKNOWN
ubuntu8.04noarchlibxslt< 1.1.22-1ubuntu1.3UNKNOWN
ubuntu10.04noarchlibxslt< 1.1.26-1ubuntu1.1UNKNOWN
ubuntu11.04noarchlibxslt< 1.1.26-6ubuntu0.1UNKNOWN
ubuntu11.10noarchlibxslt< 1.1.26-7ubuntu0.1UNKNOWN
ubuntu12.04noarchlibxslt< 1.1.26-8ubuntu1.2UNKNOWN

Related

cve 1
debiancve 1
prion 1
osv 1
openvas 17
nessus 15
debian 1
gentoo 1
centos 1
redhat 2
veracode 1
securityvulns 2
ubuntu 1
suse 1
freebsd 1
threatpost 1
chrome 1
cve
cve
CVE-2012-2893
2012-09-26 10:56:00
debiancve
debiancve
CVE-2012-2893
2012-09-26 10:56:00
prion
prion
Double free
2012-09-26 10:56:00
osv
osv
libxslt - several
2012-10-05 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2555-1)
2012-10-13 00:00:00
Debian Security Advisory DSA 2555-1 (libxslt)
2012-10-13 00:00:00
Mandriva Update for libxslt MDVSA-2012:164 (libxslt)
2012-10-12 00:00:00
nessus
nessus
Debian DSA-2555-1 : libxslt - several vulnerabilities
2012-10-06 00:00:00
Mandriva Linux Security Advisory : libxslt (MDVSA-2012:164)
2012-10-12 00:00:00
Mandriva Linux Security Advisory : libxslt (MDVSA-2013:047)
2013-04-20 00:00:00
debian
debian
[SECURITY] [DSA 2555-1] libxslt security update
2012-10-05 16:45:23
gentoo
gentoo
libxslt: Denial of service
2014-01-10 00:00:00
centos
centos
libxslt security update
2012-09-13 18:02:29
redhat
redhat
(RHSA-2012:1265) Important: libxslt security update
2012-09-13 00:00:00
(RHSA-2012:1325) Important: rhev-hypervisor6 security and bug fix update
2012-10-02 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:43:14
securityvulns
securityvulns
libxslt multiple security vulnerabilities
2012-10-05 00:00:00
[USN-1595-1] libxslt vulnerabilities
2012-10-05 00:00:00
ubuntu
ubuntu
libxslt vulnerabilities
2012-10-04 00:00:00
suse
suse
update for chromium (important)
2012-10-22 12:08:44
freebsd
freebsd
chromium -- multiple vulnerabilities
2012-09-25 00:00:00
threatpost
threatpost
Google Releases Chrome 22 and Pays Out Nearly $30K in Rewards
2012-09-26 14:16:00
chrome
chrome
Stable Channel Update
2012-09-25 00:00:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON
Related for UB:CVE-2012-2893
cve1debiancve1prion1osv1openvas17nessus15debian1gentoo1centos1redhat2veracode1securityvulns2ubuntu1suse1freebsd1threatpost1chrome1