PT-2025-11225 · Libxslt+12 · Libxslt+12
Published
2024-12-03
·
Updated
2026-05-08
·
CVE-2024-55549
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libxslt versions prior to 1.1.43
libxslt versions 1.1.34-4ubuntu0.20.04.2
libxslt versions 1.1.35-1+deb12u1
Description
libxslt is a library used for transforming XML files into other formats using XSLT. A use-after-free issue exists in the
xsltGetInheritedNsList function in libxslt versions prior to 1.1.43. This flaw could allow an attacker to potentially execute arbitrary code or cause a denial of service by providing a specially crafted XML file. The vulnerability is also present in versions 1.1.34-4ubuntu0.20.04.2 and has been addressed in version 1.1.35-1+deb12u1.Recommendations
Upgrade to libxslt version 1.1.43 or later.
Upgrade to libxslt version 1.1.35-1+deb12u1.
Upgrade to libxslt version 1.1.34-4ubuntu0.20.04.2.
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Apple Macos
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libxslt