| Package | Affected versions | Patched versions |
|---|---|---|
| libxslt | = 0.0.1= 0.1.0= 0.10.0= 0.11.0= 0.12.0= 0.13.0= 0.14.0= 0.2.0= 0.3.0= 0.4.0= 0.5.0= 0.6.0= 0.7.0= 0.8.0= 0.9.0= 1.0.0= 1.0.1= 1.0.10= 1.0.11= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.2= 1.0.20= 1.0.21= 1.0.22= 1.0.23= 1.0.24= 1.0.25= 1.0.26= 1.0.27= 1.0.28= 1.0.29= 1.0.3= 1.0.30= 1.0.31= 1.0.32= 1.0.33= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1.0= 1.1.1= 1.1.10= 1.1.11= 1.1.12= 1.1.13= 1.1.14= 1.1.15= 1.1.16= 1.1.17= 1.1.18= 1.1.19= 1.1.2= 1.1.20= 1.1.21= 1.1.22= 1.1.23= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9≤ 1.1.24 |
xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type. NOTE: this issue is due to an incomplete fix for CVE-2012-2825.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free