CVE-2015-7995 The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to....
MediumCVSS 5.0
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libxslt(Debian:12) | < 1.1.28-2.1 | 1.1.28-2.1 |
| debian/libxslt(Debian:13) | < 1.1.28-2.1 | 1.1.28-2.1 |
| debian/libxslt(Debian:14) | < 1.1.28-2.1 | 1.1.28-2.1 |
| apple iphone os | <= 9.2 | No fix listed |
| apple mac os x | <= 10.11.2 | No fix listed |
| apple tvOS | <= 9.1 | No fix listed |
| apple watchOS | <= 2.1 | No fix listed |
| xmlsoft libxslt | <= 1.1.28 | No fix listed |
References
- Debian Security Tracker CVE-2015-7995 vendor-advisory
- APPLE-SA-2016-01-19-1 vendor-advisory
- APPLE-SA-2016-01-19-2 vendor-advisory
- APPLE-SA-2016-01-25-1 vendor-advisory
- APPLE-SA-2016-03-21-2 vendor-advisory
- openSUSE-SU-2016:1439 vendor-advisory
- DSA-3605 vendor-advisory
- [oss-security] 20151027 CVE request: libxslt xsltStylePreCompute() type confusion DoS mailing-list
- [oss-security] 20151028 Re: CVE request: libxslt xsltStylePreCompute() type confusion DoS mailing-list
- www.oracle.com
- 77325 vdb-entry
- 1034736 vdb-entry
- 1038623 vdb-entry
- SSA:2016-148-02 vendor-advisory
- bugzilla.redhat.com exploit
- git.gnome.org
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- puppet.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com vendor-advisory
- bugs.debian.org issue-tracking