p PatchFirst

CVE-2015-7995

CVE-2015-7995

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.

EPSS 4.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libxslt Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.1.28-2.1

    Update to 1.1.28-2.1

  • libxslt Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.1.28-2.1

    Update to 1.1.28-2.1

  • libxslt Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.1.28-2.1

    Update to 1.1.28-2.1

  • libxslt Ubuntu:14.04:LTS

    Versions
    • 1.1.28-2
    • 1.1.28-2build1
    Affected ranges
    • ECOSYSTEM: < 1.1.28-2ubuntu0.1

    Update to 1.1.28-2ubuntu0.1

Original sources

Check your server →