Lucene search
GoogleOSV:CVE-2019-18197HistoryOct 18, 2019 - 9:15 p.m.
CVE-2019-18197
2019-10-1821:15:10
Google
osv.dev
6
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn’t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.
References
lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html
lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html
lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html
lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html
www.openwall.com/lists/oss-security/2019/11/17/2
access.redhat.com/errata/RHSA-2020:0514
bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746
bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768
bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914
gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285
lists.debian.org/debian-lts-announce/2019/10/msg00037.html
security.netapp.com/advisory/ntap-20191031-0004/
security.netapp.com/advisory/ntap-20200416-0004/
usn.ubuntu.com/4164-1/
www.oracle.com/security-alerts/cpuapr2020.html
Related
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.2.0 : libxslt (EulerOS-SA-2020-1215)
2020-03-13 00:00:00
Photon OS 2.0: Libxslt PHSA-2019-2.0-0189
2019-12-31 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2020-1215)
2020-03-13 00:00:00
Debian: Security Advisory (DLA-1973-1)
2019-10-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0920-1)
2021-04-19 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-10-23 05:35:33
nvd
nvd
CVE-2019-18197
2019-10-18 21:15:10
CVE-2015-7995
2015-11-17 15:59:16
prion
prion
Buffer overflow
2019-10-18 21:15:00
Type confusion
2015-11-17 15:59:00
alpinelinux
alpinelinux
CVE-2019-18197
2019-10-18 21:15:10
ubuntucve
ubuntucve
CVE-2015-7995
2015-11-17 00:00:00
CVE-2019-18197
2019-10-18 00:00:00
debian
debian
[SECURITY] [DLA 1973-1] libxslt security update
2019-10-27 21:17:53
[SECURITY] [DSA 3605-1] libxslt security update
2016-06-19 05:00:31
[SECURITY] [DLA 514-1] libxslt security update
2016-06-12 21:50:20
osv
osv
Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability
2022-05-24 16:59:28
libxslt - security update
2019-10-27 00:00:00
CVE-2017-5029
2017-04-24 23:59:00
github
github
mageia
mageia
Updated libxslt packages fix security vulnerability
2015-11-06 01:46:03
Updated libxslt packages fix security vulnerabilities
2019-11-02 19:54:34
Updated chromium-browser-stable packages fix security vulnerabilities
2020-03-06 19:13:58
slackware
slackware
[slackware-security] libxslt
2016-05-27 23:33:32
cvelist
cvelist
CVE-2015-7995
2015-11-17 15:00:00
CVE-2019-18197
2019-10-18 20:07:17
cve
cve
CVE-2015-7995
2015-11-17 15:59:16
CVE-2019-18197
2019-10-18 21:15:10
archlinux
archlinux
libxslt: denial of service
2016-01-13 00:00:00
[ASA-202002-3] chromium: multiple issues
2020-02-06 00:00:00
debiancve
debiancve
CVE-2015-7995
2015-11-17 15:59:16
CVE-2019-18197
2019-10-18 21:15:10
freebsd
freebsd
libxslt -- DoS vulnerability due to type confusing error
2015-10-29 00:00:00
symantec
symantec
libxslt CVE-2019-18197 Arbitrary Code Execution Vulnerability
2019-10-18 00:00:00
redhatcve
redhatcve
CVE-2019-18197
2019-11-11 10:37:46
f5
f5
K10812540 : OpenJDK vulnerability CVE-2019-18197
2022-10-06 00:00:00
amazon
amazon
Medium: libxslt
2020-10-22 18:26:00
Medium: libxslt
2020-12-16 20:31:00
Medium: libxslt
2021-01-12 22:51:00
ibm
ibm
almalinux
almalinux
Moderate: libxslt security update
2020-11-03 12:07:14
redhat
redhat
(RHSA-2020:4005) Moderate: libxslt security update
2020-09-29 07:50:58
(RHSA-2020:4464) Moderate: libxslt security update
2020-11-03 12:07:14
(RHSA-2020:0514) Important: chromium-browser security update
2020-02-17 08:02:41
oraclelinux
oraclelinux
libxslt security update
2020-11-10 00:00:00
libxslt security update
2020-10-06 00:00:00
cloudfoundry
cloudfoundry
USN-4164-1: Libxslt vulnerabilities | Cloud Foundry
2019-11-06 00:00:00
suse
suse
Security update for libxslt (moderate)
2020-05-29 00:00:00
Security update for chromium (important)
2020-02-12 00:00:00
Security update for chromium, re2 (important)
2020-02-19 00:00:00
ubuntu
ubuntu
Libxslt vulnerabilities
2019-10-22 00:00:00
Libxslt vulnerabilities
2017-04-28 00:00:00
rubygems
rubygems
Nokogiri gem, via libxslt, is affected by multiple vulnerabilities
2019-10-30 21:00:00
Nokogiri gem contains several vulnerabilities in libxml2 and libxslt
2015-04-13 21:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2019-0037
2019-11-01 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-2.0-0189
2019-11-15 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0037
2019-10-31 00:00:00
apple
apple
About the security content of tvOS 9.1.1
2016-01-25 00:00:00
About the security content of OS X El Capitan 10.11.3 and Security Update 2016-001
2016-01-19 00:00:00
About the security content of tvOS 9.1.1 - Apple Support
2016-01-25 06:43:35
rosalinux
rosalinux
Advisory ROSA-SA-2021-1906
2021-07-02 17:26:03
kaspersky
kaspersky
KLA11753 Multiple vulnerabilities in Oracle Java SE
2020-03-16 00:00:00
KLA11660 Multiple vulnerabilities in Google Chrome
2020-02-04 00:00:00
KLA11721 Multiple vulnerabilities in Opera
2020-02-14 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2020-02-04 00:00:00
androidsecurity
androidsecurity
Android Security Bulletin—June 2017
2017-06-05 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
mscve
mscve
Chromium Security Updates for Microsoft Edge (Chromium-Based)
2020-01-28 08:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00