CVE-2019-18197
Fixed in a distro release EPSS 4%CVSS 7.5
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.
Products: xmlsoft libxslt, canonical ubuntu_linux, debian_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | nokogiri | 1.10.5 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | libxslt | 1.1.33-r2 |
| Alpine 3.11 | libxslt | 1.1.33-r3 |
| Alpine 3.12 | libxslt | 1.1.33-r3 |
| Alpine 3.13 | libxslt | 1.1.33-r3 |
| Alpine 3.14 | libxslt | 1.1.33-r3 |
| Alpine 3.15 | libxslt | 1.1.33-r3 |
| Alpine 3.16 | libxslt | 1.1.33-r3 |
| Alpine 3.17 | libxslt | 1.1.33-r3 |
| Alpine 3.18 | libxslt | 1.1.33-r3 |
| Alpine 3.19 | libxslt | 1.1.33-r3 |
| Alpine 3.20 | libxslt | 1.1.33-r3 |
| Alpine 3.21 | libxslt | 1.1.33-r3 |
| Alpine 3.22 | libxslt | 1.1.33-r3 |
| Alpine 3.23 | libxslt | 1.1.33-r3 |
| Alpine 3.24 | libxslt | 1.1.33-r3 |
| Alpine 3.7 | libxslt | 1.1.31-r2 |
| Alpine 3.8 | libxslt | 1.1.33-r2 |
| Alpine 3.9 | libxslt | 1.1.33-r2 |
| Amazon Linux 2 | libxslt | 1.1.28-6.amzn2 |
| Amazon Linux 2 | libxslt-devel | 1.1.28-6.amzn2 |
| Amazon Linux 2 | libxslt-python | 1.1.28-6.amzn2 |
| Arch Linux | chromium | 80.0.3987.87-1 |
| Debian 12 | libxslt | 1.1.32-2.2 |
| Debian 13 | libxslt | 1.1.32-2.2 |
| Debian 14 | libxslt | 1.1.32-2.2 |
| Debian 8 | libxslt | 1.1.28-2+deb8u6 |
| Red Hat Enterprise Linux 7 | libxslt | 0:1.1.28-6.el7 |
| Red Hat Enterprise Linux 7 | libxslt-debuginfo | 0:1.1.28-6.el7 |
| Red Hat Enterprise Linux 7 | libxslt-devel | 0:1.1.28-6.el7 |
| Red Hat Enterprise Linux 7 | libxslt-python | 0:1.1.28-6.el7 |
| Red Hat Enterprise Linux 8 | libxslt | 0:1.1.32-5.el8 |
| Red Hat Enterprise Linux 8 | libxslt-debuginfo | 0:1.1.32-5.el8 |
| Red Hat Enterprise Linux 8 | libxslt-debugsource | 0:1.1.32-5.el8 |
| Red Hat Enterprise Linux 8 | libxslt-devel | 0:1.1.32-5.el8 |
| Red Hat rhel extras 6 | chromium-browser | 0:80.0.3987.87-1.el6_10 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:80.0.3987.87-1.el6_10 |
| SUSE Enterprise Storage 5 | libxslt | 1.1.28-17.9.1 |
| SUSE HPE Helion OpenStack 8 | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | libxslt | 1.1.32-3.8.24 |
| SUSE Linux Enterprise Server 12 SP2-BCL | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Server 12 SP4 | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | libxslt | 1.1.28-17.9.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libxslt | 1.1.28-17.9.1 |
| SUSE OpenStack Cloud 7 | libxslt | 1.1.28-17.9.1 |
| SUSE OpenStack Cloud 8 | libxslt | 1.1.28-17.9.1 |
| SUSE OpenStack Cloud Crowbar 8 | libxslt | 1.1.28-17.9.1 |
| SUSE Package Hub 12 | chromium | 80.0.3987.87-31.1 |
| SUSE Package Hub 12 | re2 | 20200101-25.1 |
| SUSE Package Hub 12 SP3 | chromium | 80.0.3987.87-31.1 |
| SUSE Package Hub 12 SP3 | re2 | 20200101-25.1 |
| SUSE Package Hub 15 SP1 | chromium | 80.0.3987.87-bp151.3.59.1 |
| Ubuntu 16.04 LTS | libxslt | 1.1.28-2.1ubuntu0.3 |
| Ubuntu 18.04 LTS | libxslt | 1.1.29-5ubuntu0.2 |
| Ubuntu Pro 14.04 LTS | libxslt | 1.1.28-2ubuntu0.2+esm1 |
| openSUSE Leap 15.1 | chromium | 80.0.3987.87-lp151.2.63.1 |
| openSUSE Leap 15.1 | libxslt | 1.1.32-lp151.3.6.1 |
| openSUSE Leap 15.1 | libxslt-python | 1.1.32-lp151.3.6.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |
| openSUSE Tumbleweed | chromium | 93.0.4577.82-1.1 |
| openSUSE Tumbleweed | libxslt | 1.1.34-3.2 |