libxslt 'libxslt/xslt.c' Remote Denial of Service Vulnerability
BID:63548
Info
libxslt 'libxslt/xslt.c' Remote Denial of Service Vulnerability
| Bugtraq ID: | 63548 |
| Class: | Design Error |
| CVE: |
CVE-2013-4520 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 06 2013 12:00AM |
| Updated: | Mar 19 2015 09:12AM |
| Credit: | SUSE QA |
| Vulnerable: |
XMLSoft libxslt 1.1.24 XMLSoft libxslt 1.1.23 XMLSoft libxslt 1.1.22 XMLSoft libxslt 1.1.21 XMLSoft libxslt 1.1.20 XMLSoft libxslt 1.1.19 XMLSoft libxslt 1.1.18 XMLSoft libxslt 1.1.17 SuSE SUSE Linux Enterprise Server 11 SP2 SuSE SUSE Linux Enterprise Server 10 SP3 LTSS SuSE SUSE Linux Enterprise Desktop 11 SP2 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux |
| Not Vulnerable: |
XMLSoft libxslt 1.1.25 |
Discussion
libxslt 'libxslt/xslt.c' Remote Denial of Service Vulnerability
libxslt is prone to a remote denial-of-service vulnerability.
An attacker can exploit this issue to cause applications to crash with a segmentation fault, denying service to legitimate users.
libxslt versions prior to 1.1.25 are vulnerable.
libxslt is prone to a remote denial-of-service vulnerability.
An attacker can exploit this issue to cause applications to crash with a segmentation fault, denying service to legitimate users.
libxslt versions prior to 1.1.25 are vulnerable.
Exploit / POC
libxslt 'libxslt/xslt.c' Remote Denial of Service Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
libxslt 'libxslt/xslt.c' Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
libxslt 'libxslt/xslt.c' Remote Denial of Service Vulnerability
References:
References:
- libxslt Homepage (XMLSoft)