Описание
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.1.28-2.1 |
| esm-infra-legacy/trusty | released | 1.1.28-2ubuntu0.1 |
| esm-infra-legacy/xenial | not-affected | 1.1.28-2.1 |
| esm-infra/xenial | not-affected | 1.1.28-2.1 |
| precise | released | 1.1.26-8ubuntu1.4 |
| trusty | released | 1.1.28-2ubuntu0.1 |
| trusty/esm | released | 1.1.28-2ubuntu0.1 |
| upstream | released | 1.1.29 |
| vivid | ignored | end of life |
| vivid/stable-phone-overlay | DNE |
Показывать по
EPSS
5 Medium
CVSS2
Связанные уязвимости
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does n ...
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
EPSS
5 Medium
CVSS2