CVE-2012-6139 libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2...
MediumCVSS 5.0
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libxslt(Debian:12) | < 1.1.26-14.1 | 1.1.26-14.1 |
| debian/libxslt(Debian:13) | < 1.1.26-14.1 | 1.1.26-14.1 |
| debian/libxslt(Debian:14) | < 1.1.26-14.1 | 1.1.26-14.1 |
| xmlsoft libxslt | <= 1.1.27 | No fix listed |
| xmlsoft libxslt | = 0.0.1 | No fix listed |
| xmlsoft libxslt | = 0.1.0 | No fix listed |
| xmlsoft libxslt | = 0.2.0 | No fix listed |
| xmlsoft libxslt | = 0.3.0 | No fix listed |
| xmlsoft libxslt | = 0.4.0 | No fix listed |
| xmlsoft libxslt | = 0.5.0 | No fix listed |
| xmlsoft libxslt | = 0.6.0 | No fix listed |
| xmlsoft libxslt | = 0.7.0 | No fix listed |
| xmlsoft libxslt | = 0.8.0 | No fix listed |
| xmlsoft libxslt | = 0.9.0 | No fix listed |
| xmlsoft libxslt | = 0.10.0 | No fix listed |
| xmlsoft libxslt | = 0.11.0 | No fix listed |
| xmlsoft libxslt | = 0.12.0 | No fix listed |
| xmlsoft libxslt | = 0.13.0 | No fix listed |
| xmlsoft libxslt | = 0.14.0 | No fix listed |
| xmlsoft libxslt | = 1.0.0 | No fix listed |
| xmlsoft libxslt | = 1.0.1 | No fix listed |
| xmlsoft libxslt | = 1.0.2 | No fix listed |
| xmlsoft libxslt | = 1.0.3 | No fix listed |
| xmlsoft libxslt | = 1.0.4 | No fix listed |
| xmlsoft libxslt | = 1.0.5 | No fix listed |
Show 59 more
| Product | Affected versions | Fixed in |
|---|---|---|
| xmlsoft libxslt | = 1.0.6 | No fix listed |
| xmlsoft libxslt | = 1.0.7 | No fix listed |
| xmlsoft libxslt | = 1.0.8 | No fix listed |
| xmlsoft libxslt | = 1.0.9 | No fix listed |
| xmlsoft libxslt | = 1.0.10 | No fix listed |
| xmlsoft libxslt | = 1.0.11 | No fix listed |
| xmlsoft libxslt | = 1.0.12 | No fix listed |
| xmlsoft libxslt | = 1.0.13 | No fix listed |
| xmlsoft libxslt | = 1.0.14 | No fix listed |
| xmlsoft libxslt | = 1.0.15 | No fix listed |
| xmlsoft libxslt | = 1.0.16 | No fix listed |
| xmlsoft libxslt | = 1.0.17 | No fix listed |
| xmlsoft libxslt | = 1.0.18 | No fix listed |
| xmlsoft libxslt | = 1.0.19 | No fix listed |
| xmlsoft libxslt | = 1.0.20 | No fix listed |
| xmlsoft libxslt | = 1.0.21 | No fix listed |
| xmlsoft libxslt | = 1.0.22 | No fix listed |
| xmlsoft libxslt | = 1.0.23 | No fix listed |
| xmlsoft libxslt | = 1.0.24 | No fix listed |
| xmlsoft libxslt | = 1.0.25 | No fix listed |
| xmlsoft libxslt | = 1.0.26 | No fix listed |
| xmlsoft libxslt | = 1.0.27 | No fix listed |
| xmlsoft libxslt | = 1.0.28 | No fix listed |
| xmlsoft libxslt | = 1.0.29 | No fix listed |
| xmlsoft libxslt | = 1.0.30 | No fix listed |
| xmlsoft libxslt | = 1.0.31 | No fix listed |
| xmlsoft libxslt | = 1.0.32 | No fix listed |
| xmlsoft libxslt | = 1.0.33 | No fix listed |
| xmlsoft libxslt | = 1.1.0 | No fix listed |
| xmlsoft libxslt | = 1.1.1 | No fix listed |
| xmlsoft libxslt | = 1.1.2 | No fix listed |
| xmlsoft libxslt | = 1.1.3 | No fix listed |
| xmlsoft libxslt | = 1.1.4 | No fix listed |
| xmlsoft libxslt | = 1.1.5 | No fix listed |
| xmlsoft libxslt | = 1.1.6 | No fix listed |
| xmlsoft libxslt | = 1.1.7 | No fix listed |
| xmlsoft libxslt | = 1.1.8 | No fix listed |
| xmlsoft libxslt | = 1.1.9 | No fix listed |
| xmlsoft libxslt | = 1.1.10 | No fix listed |
| xmlsoft libxslt | = 1.1.11 | No fix listed |
| xmlsoft libxslt | = 1.1.12 | No fix listed |
| xmlsoft libxslt | = 1.1.13 | No fix listed |
| xmlsoft libxslt | = 1.1.14 | No fix listed |
| xmlsoft libxslt | = 1.1.15 | No fix listed |
| xmlsoft libxslt | = 1.1.16 | No fix listed |
| xmlsoft libxslt | = 1.1.17 | No fix listed |
| xmlsoft libxslt | = 1.1.18 | No fix listed |
| xmlsoft libxslt | = 1.1.19 | No fix listed |
| xmlsoft libxslt | = 1.1.20 | No fix listed |
| xmlsoft libxslt | = 1.1.21 | No fix listed |
| xmlsoft libxslt | = 1.1.22 | No fix listed |
| xmlsoft libxslt | = 1.1.23 | No fix listed |
| xmlsoft libxslt | = 1.1.24 | No fix listed |
| xmlsoft libxslt | = 1.1.25 | No fix listed |
| xmlsoft libxslt | = 1.1.26 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| opensuse | = 12.2 | No fix listed |
| opensuse | = 12.3 | No fix listed |
References
- Debian Security Tracker CVE-2012-6139 vendor-advisory
- FEDORA-2013-4507 vendor-advisory
- openSUSE-SU-2013:0585 vendor-advisory
- openSUSE-SU-2013:0593 vendor-advisory
- 52745 third-party-advisory vendor-advisory
- 52805 third-party-advisory vendor-advisory
- 52813 third-party-advisory vendor-advisory
- 52884 third-party-advisory vendor-advisory
- DSA-2654 vendor-advisory
- MDVSA-2013:141 vendor-advisory
- 1028338 vdb-entry
- USN-1784-1 vendor-advisory
- xmlsoft.org
- bugzilla.gnome.org exploit patch
- bugzilla.gnome.org patch
- git.gnome.org patch
- git.gnome.org exploit patch
- wiki.mageia.org
- SUSE-SU-2013:1654 vendor-advisory
- SUSE-SU-2013:1656 vendor-advisory
- bugs.debian.org issue-tracking