Integer Overflow in libxslt - Security Update
Summary
DLA-866-1: libxslt - security update. Affects libxslt versions < 1.1.26-14.1+deb7u3. Fixed in 1.1.26-14.1+deb7u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libxslt is a library for parsing and manipulating XML documents using XSLT (Extensible Stylesheet Language Transformations). It provides a set of functions and APIs for transforming XML data into other formats. The library is widely used in various applications and systems that require XML processing capabilities.
Vulnerability Detail
The libxslt library is vulnerable to an integer overflow in the xsltAddTextString function. This vulnerability can be exploited to trigger an out-of-bounds write on 64-bit systems. An attacker could craft a malicious XML document that, when processed by an application using libxslt, could lead to arbitrary code execution or a denial of service.
How To Fix
Minimum fixed version
1.1.26-14.1+deb7u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libxsltTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update to ensure the integrity and security of the system.
Conclusion
The libxslt library is vulnerable to an integer overflow that can lead to an out-of-bounds write on 64-bit systems. To mitigate this vulnerability, it is crucial to upgrade the libxslt package to version 1.1.26-14.1+deb7u3 or later. Failure to apply the security update may expose the system to arbitrary code execution or denial of service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libxslt →
FAQ
libxslt is a library for parsing and manipulating XML documents using XSLT (Extensible Stylesheet Language Transformations). It provides a set of functions and APIs for transforming XML data into other formats.
This vulnerability can be exploited to trigger an out-of-bounds write on 64-bit systems. An attacker could craft a malicious XML document that, when processed by an application using libxslt, could lead to arbitrary code execution or a denial of service.
To fix this vulnerability, it is recommended to upgrade the libxslt package to version 1.1.26-14.1+deb7u3 or later. Detailed instructions on how to apply updates can be found in the Debian LTS security advisories documentation.
There is no known workaround for this vulnerability. It is essential to apply the security update to ensure the integrity and security of the system.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, on the Debian LTS wiki.
Related vulnerabilities
Recent vulnerabilities recorded for libxslt.
