PT-2015-7695 · Gnome+3 · Libxslt+3
Puzzor
·
Publicado
2015-11-05
·
Atualizado
2026-03-13
·
CVE-2015-7995
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
libxslt version 1.1.28
Description
The issue is related to a "type confusion" problem in the xsltStylePreCompute function, which does not properly check if the parent node is an element. This allows attackers to cause a denial of service by providing a crafted XML file.
Recommendations
For libxslt version 1.1.28, consider applying a patch or fix that addresses the type confusion issue in the xsltStylePreCompute function, specifically adding checks to ensure the parent node is an element before proceeding with processing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Ubuntu
Libxslt