CVE-2008-1767
Fixed in a distro release EPSS 13%
Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.
Products: redhat desktop, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_desktop_workstation, redhat linux_advanced_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxslt | 1.1.24-1 |
| Debian 13 | libxslt | 1.1.24-1 |
| Debian 14 | libxslt | 1.1.24-1 |
| Debian 4.0 | libxslt | 1.1.19-2 |
| Red Hat Enterprise Linux 2.1 | libxslt | 0:1.0.15-3 |
| Red Hat Enterprise Linux 2.1 | libxslt-devel | 0:1.0.15-3 |
| Red Hat Enterprise Linux 2.1 | libxslt-python | 0:1.0.15-3 |
| Red Hat Enterprise Linux 3 | libxslt | 0:1.0.33-6 |
| Red Hat Enterprise Linux 3 | libxslt-debuginfo | 0:1.0.33-6 |
| Red Hat Enterprise Linux 3 | libxslt-devel | 0:1.0.33-6 |
| Red Hat Enterprise Linux 4 | libxslt | 0:1.1.11-1.el4_6.1 |
| Red Hat Enterprise Linux 4 | libxslt-debuginfo | 0:1.1.11-1.el4_6.1 |
| Red Hat Enterprise Linux 4 | libxslt-devel | 0:1.1.11-1.el4_6.1 |
| Red Hat Enterprise Linux 4 | libxslt-python | 0:1.1.11-1.el4_6.1 |
| Red Hat Enterprise Linux 5 | libxslt | 0:1.1.17-2.el5_1.1 |
| Red Hat Enterprise Linux 5 | libxslt-debuginfo | 0:1.1.17-2.el5_1.1 |
| Red Hat Enterprise Linux 5 | libxslt-devel | 0:1.1.17-2.el5_1.1 |
| Red Hat Enterprise Linux 5 | libxslt-python | 0:1.1.17-2.el5_1.1 |
| openSUSE Tumbleweed | libxslt | 1.1.34-3.2 |