CVE-2016-1683
CVE-2016-1683
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.
CVSS 7.5 · Alta · EPSS 2,1% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
libxslt Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.29-1
Actualiza a 1.1.29-1
libxslt Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.29-1
Actualiza a 1.1.29-1
libxslt Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.29-1
Actualiza a 1.1.29-1
chromium-browser Ubuntu:14.04:LTS
- Versiones
- 29.0.1547.65-0ubuntu2
- 31.0.1650.63-0ubuntu1~20131204.1
- 32.0.1700.107-0ubuntu1~20140204.977.1
- 33.0.1750.152-0ubuntu1~pkg995.1
- 34.0.1847.116-0ubuntu2
- 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
- 37.0.2062.94-0ubuntu0.14.04.1~pkg1042
- 37.0.2062.120-0ubuntu0.14.04.1~pkg1049
- 38.0.2125.111-0ubuntu0.14.04.1.1061
- 39.0.2171.65-0ubuntu0.14.04.1.1064
- 40.0.2214.94-0ubuntu0.14.04.1.1068
- 40.0.2214.111-0ubuntu0.14.04.1.1069
- 41.0.2272.76-0ubuntu0.14.04.1.1076
- 43.0.2357.81-0ubuntu0.14.04.1.1089
- 43.0.2357.130-0ubuntu0.14.04.1.1092
- 44.0.2403.89-0ubuntu0.14.04.1.1095
- 45.0.2454.85-0ubuntu0.14.04.1.1097
- 45.0.2454.101-0ubuntu0.14.04.1.1099
- 47.0.2526.73-0ubuntu0.14.04.1.1106
- 47.0.2526.106-0ubuntu0.14.04.1.1107
- 48.0.2564.82-0ubuntu0.14.04.1.1108
- 48.0.2564.116-0ubuntu0.14.04.1.1111
- 49.0.2623.87-0ubuntu0.14.04.1.1112
- 49.0.2623.108-0ubuntu0.14.04.1.1113
- 50.0.2661.102-0ubuntu0.14.04.1.1117
- Intervalos de versiones afectados
- ECOSYSTEM: < 51.0.2704.79-0ubuntu0.14.04.1.1121
Actualiza a 51.0.2704.79-0ubuntu0.14.04.1.1121
libxslt Ubuntu:14.04:LTS
- Versiones
- 1.1.28-2
- 1.1.28-2build1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.28-2ubuntu0.1
Actualiza a 1.1.28-2ubuntu0.1
oxide-qt Ubuntu:14.04:LTS
- Versiones
- 1.0.0~bzr437-0ubuntu1
- 1.0.0~bzr452-0ubuntu1
- 1.0.0~bzr475-0ubuntu1
- 1.0.0~bzr490-0ubuntu1
- 1.0.0~bzr501-0ubuntu1
- 1.0.0~bzr501-0ubuntu2
- 1.0.4-0ubuntu0.14.04.1
- 1.0.5-0ubuntu0.14.04.1
- 1.1.2-0ubuntu0.14.04.1
- 1.2.5-0ubuntu0.14.04.1
- 1.3.4-0ubuntu0.14.04.1
- 1.4.2-0ubuntu0.14.04.1
- 1.4.3-0ubuntu0.14.04.1
- 1.5.5-0ubuntu0.14.04.3
- 1.5.6-0ubuntu0.14.04.2
- 1.6.5-0ubuntu0.14.04.1
- 1.6.6-0ubuntu0.14.04.1
- 1.7.8-0ubuntu0.14.04.1
- 1.7.9-0ubuntu0.14.04.1
- 1.8.4-0ubuntu0.14.04.2
- 1.9.1-0ubuntu0.14.04.2
- 1.9.5-0ubuntu0.14.04.1
- 1.10.3-0ubuntu0.14.04.1
- 1.11.3-0ubuntu0.14.04.1
- 1.11.4-0ubuntu0.14.04.1
- 1.12.5-0ubuntu0.14.04.1
- 1.12.6-0ubuntu0.14.04.1
- 1.12.7-0ubuntu0.14.04.1
- 1.13.6-0ubuntu0.14.04.1
- 1.14.7-0ubuntu0.14.04.1
- 1.14.9-0ubuntu0.14.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.15.7-0ubuntu0.14.04.1
Actualiza a 1.15.7-0ubuntu0.14.04.1
chromium-browser Ubuntu:16.04:LTS
- Versiones
- 45.0.2454.101-0ubuntu1.1201
- 47.0.2526.73-0ubuntu1.1218
- 47.0.2526.106-0ubuntu1.1221
- 48.0.2564.82-0ubuntu1.1222
- 48.0.2564.116-0ubuntu1.1229
- 49.0.2623.87-0ubuntu1.1232
- 49.0.2623.108-0ubuntu1.1233
- 50.0.2661.102-0ubuntu0.16.04.1.1237
- Intervalos de versiones afectados
- ECOSYSTEM: < 51.0.2704.79-0ubuntu0.16.04.1.1242
Actualiza a 51.0.2704.79-0ubuntu0.16.04.1.1242
libxslt Ubuntu:16.04:LTS
- Versiones
- 1.1.28-2build2
- 1.1.28-2.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.28-2.1ubuntu0.1
Actualiza a 1.1.28-2.1ubuntu0.1
oxide-qt Ubuntu:16.04:LTS
- Versiones
- 1.9.5-0ubuntu1
- 1.10.3-0ubuntu0.15.10.1
- 1.10.3-0ubuntu0.15.10.2
- 1.11.3-0ubuntu3
- 1.11.4-0ubuntu1
- 1.11.5-0ubuntu1
- 1.12.5-0ubuntu1
- 1.12.6-0ubuntu1
- 1.12.7-0ubuntu1
- 1.13.6-0ubuntu1
- 1.14.7-0ubuntu1
- 1.14.9-0ubuntu0.16.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.15.7-0ubuntu0.16.04.1
Actualiza a 1.15.7-0ubuntu0.16.04.1
Fuentes originales
- http://www.debian.org/security/2016/dsa-3605
- https://bugzilla.redhat.com/show_bug.cgi?id=1340016
- https://git.gnome.org/browse/libxslt/commit/?id=d182d8f6ba3071503d96ce17395c9d55871f0242
- http://www.securityfocus.com/bid/90876
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html
- https://support.apple.com/HT206901
- http://www.securitytracker.com/id/1035981
- http://www.debian.org/security/2016/dsa-3590
- http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html
- http://www.ubuntu.com/usn/USN-2992-1
- http://www.securityfocus.com/bid/91826
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html
- https://access.redhat.com/errata/RHSA-2016:1190
- https://crbug.com/583156
- https://support.apple.com/HT206905
- https://support.apple.com/HT206903
- https://support.apple.com/HT206902
- https://support.apple.com/HT206904
- https://nvd.nist.gov/vuln/detail/CVE-2016-1683