Published: 17/11/2015 Updated: 08/03/2019

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows malicious users to cause a denial of service via a crafted XML file, related to a "type confusion" issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple mac os x
apple watchos
apple tvos
xmlsoft libxslt

Debian Bug report logs - #802971 libxslt: CVE-2015-7995: Type confusion may cause DoS Package: src:libxslt; Maintainer for src:libxslt is Debian XML/SGML Group <debian-xml-sgml-pkgs@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 25 Oct 2015 18:18:02 UTC Severity: important ...

Several security issues were fixed in Libxslt ...

Several vulnerabilities were discovered in libxslt, an XSLT processing runtime library, which could lead to information disclosure or denial-of-service (application crash) against an application using the libxslt library For the stable distribution (jessie), these problems have been fixed in version 1128-2+deb8u1 We recommend that you upgrade y ...

A type confusion vulnerability was discovered in the xsltStylePreCompute() function of libxslt A remote attacker could possibly exploit this flaw to cause an application using libxslt to crash by tricking the application into processing a specially crafted XSLT document ...

NVD-CWE-Other http://www.openwall.com/lists/oss-security/2015/10/27/10 http://www.securityfocus.com/bid/77325 https://git.gnome.org/browse/libxslt/commit/?id=7ca19df892ca22d9314e95d59ce2abdeff46b617 http://www.openwall.com/lists/oss-security/2015/10/28/4 https://bugzilla.redhat.com/show_bug.cgi?id=1257962 http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html https://support.apple.com/HT205729 https://support.apple.com/HT205732 https://support.apple.com/HT205731 http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html https://support.apple.com/HT206168 http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.386546 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html http://www.debian.org/security/2016/dsa-3605 http://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html http://www.securitytracker.com/id/1038623 http://www.securitytracker.com/id/1034736 https://puppet.com/security/cve/cve-2015-7995 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802971 https://usn.ubuntu.com/3271-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-7995

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-7995

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect