Lucene search
GoogleOSV:GHSA-VMFX-GCFQ-WVM2HistoryMay 24, 2022 - 5:03 p.m.
Nokogiri implementation of libxslt vulnerable to heap corruption
2022-05-2417:03:17
Google
osv.dev
16
0.004 Low
EPSS
Percentile
74.6%
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.
Nokogiri prior to version 1.10.5 contains a vulnerable version of libxslt. Nokogiri version 1.10.5 upgrades the dependency to libxslt 1.1.34, which contains a patch for this issue.
References
github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2019-5815.yml
github.com/sparklemotion/nokogiri
github.com/sparklemotion/nokogiri/issues/2630
gitlab.gnome.org/GNOME/libxslt/commit/08b62c25871b38d5d573515ca8a065b4b8f64f6b
lists.debian.org/debian-lts-announce/2022/09/msg00010.html
nvd.nist.gov/vuln/detail/CVE-2019-5815
Related
openvas
openvas
Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2020-1166)
2020-02-25 00:00:00
Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2020-1554)
2020-04-30 00:00:00
Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2020-1659)
2020-06-16 00:00:00
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.2.0 : libxslt (EulerOS-SA-2020-1554)
2020-05-01 00:00:00
EulerOS 2.0 SP2 : libxslt (EulerOS-SA-2020-1659)
2020-06-17 00:00:00
Photon OS 2.0: Libxslt PHSA-2019-2.0-0196
2020-01-16 00:00:00
cve
cve
CVE-2019-5815
2019-12-11 01:15:10
debiancve
debiancve
CVE-2019-5815
2019-12-11 01:15:10
cvelist
cvelist
CVE-2019-5815
2019-12-11 00:55:15
redhatcve
redhatcve
CVE-2019-5815
2019-04-25 08:26:30
ubuntucve
ubuntucve
CVE-2019-5815
2019-12-11 00:00:00
prion
prion
Type confusion
2019-12-11 01:15:00
nvd
nvd
CVE-2019-5815
2019-12-11 01:15:10
github
github
Nokogiri implementation of libxslt vulnerable to heap corruption
2022-05-24 17:03:17
osv
osv
CVE-2019-5815
2019-12-11 01:15:10
libxslt vulnerabilities
2022-08-22 17:59:23
libxslt - security update
2022-09-09 00:00:00
cloudfoundry
cloudfoundry
USN-5575-1: Libxslt vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
debian
debian
[SECURITY] [DLA 3101-1] libxslt security update
2022-09-09 13:08:41
[SECURITY] [DSA 4500-1] chromium security update
2019-08-13 05:17:57
[SECURITY] [DSA 4500-1] chromium security update
2019-08-13 05:17:57
ubuntu
ubuntu
Libxslt vulnerabilities
2022-08-22 00:00:00
Libxslt vulnerabilities
2022-08-22 00:00:00
photon
photon
rosalinux
rosalinux
Advisory ROSA-SA-2021-1906
2021-07-02 17:26:03
suse
suse
Security update for chromium (important)
2019-05-04 00:00:00
Security update for chromium (important)
2019-05-23 00:00:00
Security update for chromium (important)
2019-05-04 00:00:00
archlinux
archlinux
[ASA-201904-12] chromium: multiple issues
2019-04-24 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2019-04-23 00:00:00
redhat
redhat
(RHSA-2019:1021) Important: chromium-browser security update
2019-05-07 15:56:33
kaspersky
kaspersky
KLA11474 Multiple vulnerabilities in Google Chrome
2019-04-23 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: chromium-75.0.3770.100-2.fc30
2019-07-01 01:09:45
[SECURITY] Fedora 29 Update: chromium-75.0.3770.100-3.fc29
2019-07-25 01:51:57
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2019-08-15 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2019-09-21 14:07:28
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47