CVE-2015-7995
Fixed in a distro release EPSS 4%
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
Products: apple iphone_os, apple mac_os_x, apple tvos, apple watchos, xmlsoft libxslt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxslt | 1.1.28-2.1 |
| Debian 13 | libxslt | 1.1.28-2.1 |
| Debian 14 | libxslt | 1.1.28-2.1 |
| Debian 7 | libxslt | 1.1.26-14.1+deb7u1 |
| Debian 8 | libxslt | 1.1.28-2+deb8u1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Server 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxslt-python | 1.1.24-19.33.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libxslt | 1.1.28-16.1 |
| Ubuntu 14.04 LTS | libxslt | 1.1.28-2ubuntu0.1 |
| Ubuntu 16.04 LTS | libxslt | 1.1.28-2.1ubuntu0.1 |
| openSUSE Tumbleweed | libxslt | 1.1.29-1.3 |
| openSUSE Tumbleweed | ruby3.2-rubygem-nokogiri | 1.13.9-1.7 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.18.9-1.4 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.18.2-1.1 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.15.5-1.5 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.13.3-1.1 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.6.8.1-1.3 |