CVE-2016-4738
Fixed in a distro release EPSS 4%
libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Products: apple iphone_os, apple mac_os_x, apple tvos, apple watchos, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxslt | 1.1.29-2 |
| Debian 13 | libxslt | 1.1.29-2 |
| Debian 14 | libxslt | 1.1.29-2 |
| Debian 7 | libxslt | 1.1.26-14.1+deb7u2 |
| Debian 8 | libxslt | 1.1.28-2+deb8u2 |
| SUSE Linux Enterprise Desktop 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Server 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxslt-python | 1.1.24-19.33.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libxslt | 1.1.28-16.1 |
| Ubuntu 14.04 LTS | libxslt | 1.1.28-2ubuntu0.1 |
| Ubuntu 16.04 LTS | libxslt | 1.1.28-2.1ubuntu0.1 |
| openSUSE Tumbleweed | libxslt | 1.1.34-3.2 |
| openSUSE Tumbleweed | ruby3.2-rubygem-nokogiri | 1.13.9-1.7 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.18.9-1.4 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.18.2-1.1 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.15.5-1.5 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.13.3-1.1 |