Lucene search
Redhat.comRH:CVE-2019-11068HistoryApr 09, 2020 - 10:56 a.m.
CVE-2019-11068
2020-04-0910:56:05
redhat.com
access.redhat.com
13
0.003 Low
EPSS
Percentile
65.5%
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
Mitigation
This flaw only applies to applications compiled against libxml2 which use xsltCheckRead and xsltCheckWrite functions and/or allow users to load arbitrary URLs to be parsed via libxml2. In all other cases, applications are not vulnerable.
Related
suse
suse
Security update for libxslt (moderate)
2019-05-22 00:00:00
Security update for libxslt (moderate)
2019-05-22 00:00:00
Security update for libxslt (moderate)
2019-05-22 00:00:00
amazon
amazon
Medium: libxslt
2019-07-17 23:37:00
Medium: libxslt
2020-10-22 18:26:00
Medium: libxslt
2020-12-16 20:31:00
alpinelinux
alpinelinux
CVE-2019-11068
2019-04-10 20:29:01
debian
debian
[SECURITY] [DLA 1756-1] libxslt security update
2019-04-15 16:07:56
veracode
veracode
Authorization Bypass
2019-04-23 03:14:13
prion
prion
Authentication flaw
2019-04-10 20:29:00
nessus
nessus
EulerOS 2.0 SP2 : libxslt (EulerOS-SA-2019-1317)
2019-05-01 00:00:00
Fedora 29 : libxslt (2019-e74d639587)
2019-06-24 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: libxslt-1.1.33-1.fc30
2019-06-14 00:56:14
[SECURITY] Fedora 29 Update: libxslt-1.1.33-1.fc29
2019-06-23 10:23:11
[SECURITY] Fedora 30 Update: mingw-libxslt-1.1.33-1.fc30
2019-06-18 18:15:35
cvelist
cvelist
CVE-2019-11068
2019-04-10 19:38:18
mageia
mageia
Updated libxslt packages fix security vulnerability
2019-05-18 15:33:10
ubuntu
ubuntu
Libxslt vulnerability
2019-04-15 00:00:00
Libxslt vulnerability
2019-04-15 00:00:00
openvas
openvas
openSUSE: Security Advisory for libxslt (openSUSE-SU-2019:1428-1)
2019-05-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:1221-2)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:1232-1)
2021-04-19 00:00:00
f5
f5
K30444545 : libxslt vulnerability CVE-2019-11068
2022-08-19 00:00:00
symantec
symantec
libxslt CVE-2019-11068 Security Bypass Vulnerability
2019-04-10 00:00:00
nvd
nvd
CVE-2019-11068
2019-04-10 20:29:01
cve
cve
CVE-2019-11068
2019-04-10 20:29:01
osv
osv
libxslt - security update
2019-04-15 00:00:00
Nokogiri vulnerable to libxslt protection mechanism bypass
2022-05-13 01:21:57
CVE-2019-11068
2019-04-10 20:29:01
freebsd
freebsd
libxslt -- security framework bypass
2019-04-10 00:00:00
github
github
Nokogiri vulnerable to libxslt protection mechanism bypass
2022-05-13 01:21:57
cloudfoundry
cloudfoundry
USN-3947-1: Libxslt vulnerability | Cloud Foundry
2019-04-25 00:00:00
debiancve
debiancve
CVE-2019-11068
2019-04-10 20:29:01
ubuntucve
ubuntucve
CVE-2019-11068
2019-04-10 00:00:00
rubygems
rubygems
redhat
redhat
(RHSA-2020:4005) Moderate: libxslt security update
2020-09-29 07:50:58
(RHSA-2020:4464) Moderate: libxslt security update
2020-11-03 12:07:14
ibm
ibm
oraclelinux
oraclelinux
libxslt security update
2020-11-10 00:00:00
libxslt security update
2020-10-06 00:00:00
almalinux
almalinux
Moderate: libxslt security update
2020-11-03 12:07:14
photon
photon
Critical Photon OS Security Update - PHSA-2019-0010
2019-04-19 00:00:00
Critical Photon OS Security Update - PHSA-2019-3.0-0010
2019-04-19 00:00:00
kaspersky
kaspersky
KLA11582 Multiple vulnerabilities in Oracle Java SE
2019-10-15 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00