CVE-2015-7995
CVE-2015-7995
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
EPSS 4,3% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
libxslt Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.28-2.1
Actualiza a 1.1.28-2.1
libxslt Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.28-2.1
Actualiza a 1.1.28-2.1
libxslt Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.28-2.1
Actualiza a 1.1.28-2.1
libxslt Ubuntu:14.04:LTS
- Versiones
- 1.1.28-2
- 1.1.28-2build1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.28-2ubuntu0.1
Actualiza a 1.1.28-2ubuntu0.1
Fuentes originales
- http://www.debian.org/security/2016/dsa-3605
- https://support.apple.com/HT206168
- https://support.apple.com/HT205731
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017
- https://support.apple.com/HT205729
- http://www.openwall.com/lists/oss-security/2015/10/27/10
- http://www.openwall.com/lists/oss-security/2015/10/28/4
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html
- http://www.securitytracker.com/id/1034736
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
- https://puppet.com/security/cve/cve-2015-7995
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html
- https://git.gnome.org/browse/libxslt/commit/?id=7ca19df892ca22d9314e95d59ce2abdeff46b617
- http://www.securityfocus.com/bid/77325
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.386546
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
- https://support.apple.com/HT205732
- https://bugzilla.redhat.com/show_bug.cgi?id=1257962
- http://www.securitytracker.com/id/1038623
- https://nvd.nist.gov/vuln/detail/CVE-2015-7995