Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5575-1
HistoryAug 22, 2022 - 12:00 a.m.

Libxslt vulnerabilities

2022-08-2200:00:00
ubuntu.com
52
ubuntu lts
vulnerabilities
libxslt
cve-2019-5815
cve-2021-30560

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.4%

JSON

Releases

  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • libxslt - XSLT processing library

Details

Nicolas Grégoire discovered that Libxslt incorrectly handled certain XML.
An attacker could possibly use this issue to expose sensitive information
or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS.
(CVE-2019-5815)

Alexey Neyman incorrectly handled certain HTML pages.
An attacker could possibly use this issue to expose sensitive information
or execute arbitrary code. (CVE-2021-30560)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchlibxslt1.1< 1.1.34-4ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchlibxslt1-dev< 1.1.34-4ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchlibxslt1.1-dbgsym< 1.1.34-4ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchxsltproc< 1.1.34-4ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchxsltproc-dbgsym< 1.1.34-4ubuntu0.22.04.1UNKNOWN
Ubuntu20.04noarchlibxslt1.1< 1.1.34-4ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibxslt1-dev< 1.1.34-4ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibxslt1.1-dbgsym< 1.1.34-4ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchxsltproc< 1.1.34-4ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchxsltproc-dbgsym< 1.1.34-4ubuntu0.20.04.1UNKNOWN
Rows per page:
1-10 of 161

Related

openvas 45
nessus 53
osv 10
debian 4
ubuntu 1
cloudfoundry 1
veracode 1
github 3
nvd 2
mscve 1
cve 2
cbl_mariner 2
debiancve 2
prion 2
ubuntucve 2
cnvd 1
mageia 2
alpinelinux 1
gentoo 3
redhatcve 1
cvelist 2
slackware 1
photon 11
rubygems 1
suse 9
kaspersky 4
chrome 2
archlinux 4
fedora 5
freebsd 1
rosalinux 1
redhat 1
ibm 1
tenable 1
openvas
openvas
Ubuntu: Security Advisory (USN-5575-2)
2022-08-26 00:00:00
Debian: Security Advisory (DLA-3101-1)
2022-09-10 00:00:00
Ubuntu: Security Advisory (USN-5575-1)
2022-08-26 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Libxslt vulnerabilities (USN-5575-1)
2022-08-22 00:00:00
Ubuntu 16.04 ESM : Libxslt vulnerabilities (USN-5575-2)
2022-08-22 00:00:00
Debian DLA-3101-1 : libxslt - LTS security update
2022-09-10 00:00:00
osv
osv
libxslt - security update
2022-09-09 00:00:00
libxslt vulnerabilities
2022-08-22 12:37:09
libxslt vulnerabilities
2022-08-22 17:59:23
debian
debian
[SECURITY] [DLA 3101-1] libxslt security update
2022-09-09 13:08:41
[SECURITY] [DSA 5216-1] libxslt security update
2022-08-24 15:04:29
[SECURITY] [DSA 4500-1] chromium security update
2019-08-13 05:17:57
ubuntu
ubuntu
Libxslt vulnerabilities
2022-08-22 00:00:00
cloudfoundry
cloudfoundry
USN-5575-1: Libxslt vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
veracode
veracode
Arbitrary Code Execution
2021-07-16 17:48:19
github
github
Nokogiri has vulnerable dependencies on libxml2 and libxslt
2022-05-24 19:09:47
Nokogiri implementation of libxslt vulnerable to heap corruption
2022-05-24 17:03:17
Vulnerable dependencies in Nokogiri
2022-02-25 20:32:09
nvd
nvd
CVE-2021-30560
2021-08-03 19:15:08
CVE-2019-5815
2019-12-11 01:15:10
mscve
mscve
Chromium: CVE-2021-30560 Use after free in Blink XSLT
2021-07-19 07:00:00
cve
cve
CVE-2021-30560
2021-08-03 19:15:08
CVE-2019-5815
2019-12-11 01:15:10
cbl_mariner
cbl_mariner
CVE-2021-30560 affecting package libxslt 1.1.34-2
2022-06-15 17:03:07
CVE-2021-30560 affecting package libxslt for versions less than 1.1.34-7
2022-06-03 17:54:00
debiancve
debiancve
CVE-2021-30560
2021-08-03 19:15:08
CVE-2019-5815
2019-12-11 01:15:10
prion
prion
Design/Logic Flaw
2021-08-03 19:15:00
Type confusion
2019-12-11 01:15:00
ubuntucve
ubuntucve
CVE-2021-30560
2021-08-03 00:00:00
CVE-2019-5815
2019-12-11 00:00:00
cnvd
cnvd
Google Chrome Resource Management Error Vulnerability (CNVD-2021-68462)
2021-07-16 00:00:00
mageia
mageia
Updated libxslt packages fix security vulnerability
2022-09-21 21:15:27
Updated chromium-browser-stable packages fix security vulnerabilities
2019-09-21 14:07:28
alpinelinux
alpinelinux
CVE-2021-30560
2021-08-03 19:15:08
gentoo
gentoo
libxslt: Multiple Vulnerabilities
2023-10-31 00:00:00
Chromium, Google Chrome: Multiple vulnerabilities
2021-07-22 00:00:00
Chromium, Google Chrome: Multiple vulnerabilities
2019-08-15 00:00:00
redhatcve
redhatcve
CVE-2019-5815
2019-04-25 08:26:30
cvelist
cvelist
CVE-2019-5815
2019-12-11 00:55:15
CVE-2021-30560
2021-08-03 00:00:00
slackware
slackware
[slackware-security] libxslt
2022-03-01 05:14:54
photon
photon
Important Photon OS Security Update - PHSA-2022-0398
2022-05-30 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0398
2022-05-30 00:00:00
Important Photon OS Security Update - PHSA-2022-0485
2022-06-17 00:00:00
rubygems
rubygems
Update packaged libxml2 (2.9.12 → 2.9.13) and libxslt (1.1.34 → 1.1.35)
2022-02-20 21:00:00
suse
suse
Security update for opera (important)
2021-08-05 00:00:00
Security update for opera (important)
2021-08-05 00:00:00
Security update for chromium (important)
2021-07-22 00:00:00
kaspersky
kaspersky
KLA12240 Multiple vulnerabilities in Opera
2021-07-21 00:00:00
KLA12235 Multiple vulnerabilities in Microsoft Browser
2021-07-19 00:00:00
KLA12234 Multiple vulnerabilities in Google Chrome
2021-07-15 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2021-07-15 00:00:00
Stable Channel Update for Desktop
2019-04-23 00:00:00
archlinux
archlinux
[ASA-202107-30] chromium: arbitrary code execution
2021-07-16 00:00:00
[ASA-202107-31] vivaldi: arbitrary code execution
2021-07-16 00:00:00
[ASA-202107-46] opera: arbitrary code execution
2021-07-21 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: chromium-91.0.4472.164-1.fc33
2021-07-26 01:02:49
[SECURITY] Fedora 34 Update: chromium-91.0.4472.164-1.fc34
2021-07-19 01:13:48
[SECURITY] Fedora 30 Update: chromium-75.0.3770.100-2.fc30
2019-07-01 01:09:45
freebsd
freebsd
chromium -- multiple vulnerabilities
2021-07-15 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1906
2021-07-02 17:26:03
redhat
redhat
(RHSA-2019:1021) Important: chromium-browser security update
2019-05-07 15:56:33
ibm
ibm
Security Bulletin: Mutiple Vulnerabilties Affecting Watson Machine Learning Accelerator on Cloud Pak for Data version
2023-11-13 15:22:22
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.4%

JSON
Related for USN-5575-1
openvas45nessus53osv10debian4ubuntu1cloudfoundry1veracode1github3nvd2mscve1cve2cbl_mariner2debiancve2prion2ubuntucve2cnvd1mageia2alpinelinux1gentoo3redhatcve1cvelist2slackware1photon11rubygems1suse9kaspersky4chrome2archlinux4fedora5freebsd1rosalinux1redhat1ibm1tenable1