CVE-2017-5029
Fixed in a distro release EPSS 2%
The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
Products: google chrome, xmlsoft libxslt, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | nokogiri | 1.7.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | libxslt | 1.1.29-r1 |
| Alpine 3.11 | libxslt | 1.1.29-r1 |
| Alpine 3.12 | libxslt | 1.1.29-r1 |
| Alpine 3.13 | libxslt | 1.1.29-r1 |
| Alpine 3.14 | libxslt | 1.1.29-r1 |
| Alpine 3.15 | libxslt | 1.1.29-r1 |
| Alpine 3.16 | libxslt | 1.1.29-r1 |
| Alpine 3.17 | libxslt | 1.1.29-r1 |
| Alpine 3.18 | libxslt | 1.1.29-r1 |
| Alpine 3.19 | libxslt | 1.1.29-r1 |
| Alpine 3.2 | libxslt | 1.1.29-r1 |
| Alpine 3.20 | libxslt | 1.1.29-r1 |
| Alpine 3.21 | libxslt | 1.1.29-r1 |
| Alpine 3.22 | libxslt | 1.1.29-r1 |
| Alpine 3.23 | libxslt | 1.1.29-r1 |
| Alpine 3.24 | libxslt | 1.1.29-r1 |
| Alpine 3.3 | libxslt | 1.1.29-r1 |
| Alpine 3.4 | libxslt | 1.1.29-r1 |
| Alpine 3.5 | libxslt | 1.1.29-r1 |
| Alpine 3.6 | libxslt | 1.1.29-r1 |
| Alpine 3.7 | libxslt | 1.1.29-r1 |
| Alpine 3.8 | libxslt | 1.1.29-r1 |
| Alpine 3.9 | libxslt | 1.1.29-r1 |
| Arch Linux | chromium | 57.0.2987.98-1 |
| Arch Linux | libxslt | 1.1.29+41+gdf5330d1-1 |
| Debian 12 | libxslt | 1.1.29-2.1 |
| Debian 13 | libxslt | 1.1.29-2.1 |
| Debian 14 | libxslt | 1.1.29-2.1 |
| Debian 7 | libxslt | 1.1.26-14.1+deb7u3 |
| Debian 8 | chromium-browser | 57.0.2987.98-1~deb8u1 |
| Red Hat rhel extras 6 | chromium-browser | 0:57.0.2987.98-1.el6 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:57.0.2987.98-1.el6 |
| SUSE Linux Enterprise Desktop 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Server 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxslt | 1.1.24-19.33.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxslt-python | 1.1.24-19.33.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libxslt | 1.1.28-16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libxslt | 1.1.28-16.1 |
| SUSE Package Hub 12 SP2 | chromium | 57.0.2987.98-8.1 |
| Ubuntu 14.04 LTS | chromium-browser | 58.0.3029.81-0ubuntu0.14.04.1172 |
| Ubuntu 14.04 LTS | libxslt | 1.1.28-2ubuntu0.1 |
| Ubuntu 14.04 LTS | oxide-qt | 1.21.5-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | chromium-browser | 57.0.2987.98-0ubuntu0.16.04.1276 |
| Ubuntu 16.04 LTS | libxslt | 1.1.28-2.1ubuntu0.1 |
| Ubuntu 16.04 LTS | oxide-qt | 1.21.5-0ubuntu0.16.04.1 |
| openSUSE Tumbleweed | libxslt | 1.1.34-3.2 |
| openSUSE Tumbleweed | ruby3.2-rubygem-nokogiri | 1.13.9-1.7 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.15.5-1.5 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.18.9-1.4 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.13.3-1.1 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.18.2-1.1 |