libxslt 'xsltDocumentFunction()' And 'xsltAddKey()' Multiple Denial of Service Vulnerabilities
BID:58685
Info
libxslt 'xsltDocumentFunction()' And 'xsltAddKey()' Multiple Denial of Service Vulnerabilities
| Bugtraq ID: | 58685 |
| Class: | Design Error |
| CVE: |
CVE-2012-6139 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 02 2012 12:00AM |
| Updated: | Apr 13 2015 10:14PM |
| Credit: | Nicolas Gregoire |
| Vulnerable: |
XMLSoft libxslt 1.1.24 XMLSoft libxslt 1.1.23 XMLSoft libxslt 1.1.22 XMLSoft libxslt 1.1.21 XMLSoft libxslt 1.1.20 XMLSoft libxslt 1.1.19 XMLSoft libxslt 1.1.18 XMLSoft libxslt 1.1.17 XMLSoft libxslt 1.1.16 XMLSoft libxslt 1.1.15 XMLSoft libxslt 1.1.14 XMLSoft libxslt 1.1.13 XMLSoft libxslt 1.1.12 XMLSoft libxslt 1.1.11 XMLSoft libxslt 1.1.10 XMLSoft libxslt 1.1.9 XMLSoft libxslt 1.1.8 XMLSoft libxslt 1.0.33 XMLSoft libxslt 1.0.15 XMLSoft libxslt 1.1.26 XMLSoft libxslt 1.1.25 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 12.10 i386 Ubuntu Ubuntu Linux 12.10 amd64 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 SuSE SUSE Linux Enterprise Software Development Kit 11 SP2 SuSE SUSE Linux Enterprise Server 11 SP3 for VMware SuSE SUSE Linux Enterprise Server 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP2 for VMware SuSE SUSE Linux Enterprise Server 11 SP2 SuSE SUSE Linux Enterprise Server 10 SP4 LTSS SuSE SUSE Linux Enterprise Server 10 SP3 LTSS SuSE Suse Linux Enterprise Desktop 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP2 Oracle Solaris 9 Oracle Solaris 11.1 Oracle Solaris 10 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
XMLSoft libxslt 1.1.28 Oracle Solaris 11.1.11.4.0 |
Exploit / POC
libxslt 'xsltDocumentFunction()' And 'xsltAddKey()' Multiple Denial of Service Vulnerabilities
An attacker can use readily available tools to exploit these issues.
An attacker can use readily available tools to exploit these issues.
Solution / Fix
libxslt 'xsltDocumentFunction()' And 'xsltAddKey()' Multiple Denial of Service Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva lib64xslt-devel-1.1.24-3.4mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64xslt1-1.1.24-3.4mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libxslt-proc-1.1.24-3.4mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva python-libxslt-1.1.24-3.4mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/
MandrakeSoft Enterprise Server 5
-
Mandriva libxslt-devel-1.1.24-3.4mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libxslt-proc-1.1.24-3.4mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libxslt1-1.1.24-3.4mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva python-libxslt-1.1.24-3.4mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/
Mandriva Business Server 1 X86 64
-
Mandriva lib64xslt-devel-1.1.26-6.20120127.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64xslt1-1.1.26-6.20120127.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva python-libxslt-1.1.26-6.20120127.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva xsltproc-1.1.26-6.20120127.3.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
libxslt 'xsltDocumentFunction()' And 'xsltAddKey()' Multiple Denial of Service Vulnerabilities
References:
References:
- Bug 685328 - Crash reading NULL when using xsl:key (Bugzilla)
- Bug 685330 - Crash near NULL when passing an uninitialized variable to document( (Bugzilla)
- CVE-2012-6139 Denial of Service (DoS) vulnerability in LibXSLT (Oracle)
- libxslt "xsltDocumentFunction()" and "xsltAddKey()" Denial of Service Vulnerabil (Seclist)
- libxslt Homepage (XMLSoft)