CVE-2012-6139
Published: 26 March 2013
libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.
Priority
Medium
Status
| Package | Release | Status |
|---|---|---|
|
libxslt Launchpad, Ubuntu, Debian |
Upstream |
Pending
(1.1.28)
|
|
Patches: Upstream: http://git.gnome.org/browse/libxslt/commit/?id=dc11b6b379a882418093ecc8adf11f6166682e8d (bug #685328) Upstream: http://git.gnome.org/browse/libxslt/commit/?id=6c99c519d97e5fcbec7a9537d190efb442e4e833 (bug #685330) |
||
Notes
| Author | Note |
|---|---|
| jdstrand | could reproduce 685328 on all releases but not 685330. PoCs in bugs (be sure to use 'Save As' in your browser when downloading PoCs) |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6139
- http://seclists.org/oss-sec/2013/q1/738
- https://usn.ubuntu.com/usn/usn-1784-1
- NVD
- Launchpad
- Debian