PT-2019-4666 · Libxslt+4 · Libxslt+4

Published 2019-07-01 · Updated 2024-06-15 · CVE-2019-13117

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions libxslt version 1.1.33

Description The issue is related to the xsltNumberFormatInsertNumbers function in libxslt, where an xsl:number with certain format strings could lead to an uninitialized read. This could allow an attacker to discern whether a byte on the stack contains specific characters. The vulnerability is associated with the use of uninitialized tokens and may allow a remote attacker to gain unauthorized access to protected information.

Recommendations For libxslt version 1.1.33, consider updating to a newer version that contains a fix for this issue, as using uninitialized tokens in the xsltNumberFormatInsertNumbers function poses a security risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

RCE

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-908

CWE-20

CWE-134

Related Identifiers

ALT-PU-2019-2688

ALT-PU-2019-3146

ALT-PU-2020-3302

ALT-PU-2020-3348

BDU:2020-00859

CVE-2019-13117

DLA-1860-1

GHSA-4HM9-844J-JMXP

MGASA-2019-0313

OPENSUSE-SU-2020:0731-1

OPENSUSE-SU-2020_0731-1

OPENSUSE-SU-2024:11017-1

SUSE-SU-2019:1867-1

SUSE-SU-2019_1867-1

SUSE-SU-2020:0081-1

SUSE-SU-2020:0640-1

SUSE-SU-2020:0642-1

SUSE-SU-2020:1409-1

SUSE-SU-2020_1409-1

USN-4164-1

Affected Products

Alt Linux

Java Platform

Suse

Ubuntu

Libxslt

References · 114

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2019-13117.yml · Exploit
• https://osv.dev/vulnerability/USN-4164-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-13117 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0313 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0640-1 · Vendor Advisory
• https://usn.ubuntu.com/4164-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1867-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0731-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00859 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-13117 · Security Note
• https://ubuntu.com/security/CVE-2019-18197 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-13117 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4164-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-13117 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11017-1 · Vendor Advisory