Описание
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.
Отчет
Red Hat OpenStack consumes fixes from the base Red Hat Enterprise Linux Operating System. Therefore the libxslt package provided by Red Hat OpenStack has been marked as 'will not fix'.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | libxslt | Out of support scope | ||
| Red Hat Enterprise Linux 6 | libxslt | Out of support scope | ||
| Red Hat OpenStack Platform 10 (Newton) | libxslt | Will not fix | ||
| Red Hat OpenStack Platform 13 (Queens) | libxslt | Will not fix | ||
| Red Hat OpenStack Platform 14 (Rocky) | libxslt | Will not fix | ||
| Red Hat Storage 3 | libxslt | Affected | ||
| Red Hat Enterprise Linux 6 Supplementary | chromium-browser | Fixed | RHSA-2020:0514 | 17.02.2020 |
| Red Hat Enterprise Linux 7 | libxslt | Fixed | RHSA-2020:4005 | 29.09.2020 |
| Red Hat Enterprise Linux 8 | libxslt | Fixed | RHSA-2020:4464 | 04.11.2020 |
| Red Hat Enterprise Linux 8 | libxslt | Fixed | RHSA-2020:4464 | 04.11.2020 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable i ...
EPSS
7.5 High
CVSS3