4.3

CVE-2013-4520

Exploit
xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type.  NOTE: this issue is due to an incomplete fix for CVE-2012-2825.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xmlsoft ≫ Libxslt Version <= 1.1.24
Xmlsoft ≫ Libxslt Version 0.0.1
Xmlsoft ≫ Libxslt Version 0.1.0
Xmlsoft ≫ Libxslt Version 0.2.0
Xmlsoft ≫ Libxslt Version 0.3.0
Xmlsoft ≫ Libxslt Version 0.4.0
Xmlsoft ≫ Libxslt Version 0.5.0
Xmlsoft ≫ Libxslt Version 0.6.0
Xmlsoft ≫ Libxslt Version 0.7.0
Xmlsoft ≫ Libxslt Version 0.8.0
Xmlsoft ≫ Libxslt Version 0.9.0
Xmlsoft ≫ Libxslt Version 0.10.0
Xmlsoft ≫ Libxslt Version 0.11.0
Xmlsoft ≫ Libxslt Version 0.12.0
Xmlsoft ≫ Libxslt Version 0.13.0
Xmlsoft ≫ Libxslt Version 0.14.0
Xmlsoft ≫ Libxslt Version 1.0.0
Xmlsoft ≫ Libxslt Version 1.0.1
Xmlsoft ≫ Libxslt Version 1.0.2
Xmlsoft ≫ Libxslt Version 1.0.3
Xmlsoft ≫ Libxslt Version 1.0.4
Xmlsoft ≫ Libxslt Version 1.0.5
Xmlsoft ≫ Libxslt Version 1.0.6
Xmlsoft ≫ Libxslt Version 1.0.7
Xmlsoft ≫ Libxslt Version 1.0.8
Xmlsoft ≫ Libxslt Version 1.0.9
Xmlsoft ≫ Libxslt Version 1.0.10
Xmlsoft ≫ Libxslt Version 1.0.11
Xmlsoft ≫ Libxslt Version 1.0.12
Xmlsoft ≫ Libxslt Version 1.0.13
Xmlsoft ≫ Libxslt Version 1.0.14
Xmlsoft ≫ Libxslt Version 1.0.15
Xmlsoft ≫ Libxslt Version 1.0.16
Xmlsoft ≫ Libxslt Version 1.0.17
Xmlsoft ≫ Libxslt Version 1.0.18
Xmlsoft ≫ Libxslt Version 1.0.19
Xmlsoft ≫ Libxslt Version 1.0.20
Xmlsoft ≫ Libxslt Version 1.0.21
Xmlsoft ≫ Libxslt Version 1.0.22
Xmlsoft ≫ Libxslt Version 1.0.23
Xmlsoft ≫ Libxslt Version 1.0.24
Xmlsoft ≫ Libxslt Version 1.0.25
Xmlsoft ≫ Libxslt Version 1.0.26
Xmlsoft ≫ Libxslt Version 1.0.27
Xmlsoft ≫ Libxslt Version 1.0.28
Xmlsoft ≫ Libxslt Version 1.0.29
Xmlsoft ≫ Libxslt Version 1.0.30
Xmlsoft ≫ Libxslt Version 1.0.31
Xmlsoft ≫ Libxslt Version 1.0.32
Xmlsoft ≫ Libxslt Version 1.0.33
Xmlsoft ≫ Libxslt Version 1.1.0
Xmlsoft ≫ Libxslt Version 1.1.1
Xmlsoft ≫ Libxslt Version 1.1.2
Xmlsoft ≫ Libxslt Version 1.1.3
Xmlsoft ≫ Libxslt Version 1.1.4
Xmlsoft ≫ Libxslt Version 1.1.5
Xmlsoft ≫ Libxslt Version 1.1.6
Xmlsoft ≫ Libxslt Version 1.1.7
Xmlsoft ≫ Libxslt Version 1.1.8
Xmlsoft ≫ Libxslt Version 1.1.9
Xmlsoft ≫ Libxslt Version 1.1.10
Xmlsoft ≫ Libxslt Version 1.1.11
Xmlsoft ≫ Libxslt Version 1.1.12
Xmlsoft ≫ Libxslt Version 1.1.13
Xmlsoft ≫ Libxslt Version 1.1.14
Xmlsoft ≫ Libxslt Version 1.1.15
Xmlsoft ≫ Libxslt Version 1.1.16
Xmlsoft ≫ Libxslt Version 1.1.17
Xmlsoft ≫ Libxslt Version 1.1.18
Xmlsoft ≫ Libxslt Version 1.1.19
Xmlsoft ≫ Libxslt Version 1.1.20
Xmlsoft ≫ Libxslt Version 1.1.21
Xmlsoft ≫ Libxslt Version 1.1.22
Xmlsoft ≫ Libxslt Version 1.1.23
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.29% 0.811
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.suse.com/support/update/announcement/2013/suse-su-20131654-1.html
https://www.suse.com/support/update/announcement/2013/suse-su-20131656-1.html
http://seclists.org/oss-sec/2013/q4/238
Patch
http://seclists.org/oss-sec/2013/q4/239
Patch
http://secunia.com/advisories/56072
Vendor Advisory
http://www.osvdb.org/99671
https://bugzilla.novell.com/show_bug.cgi?id=849019
Patch
Exploit
https://gitorious.org/libxslt/libxslt/commit/7089a62b8f133b42a2981cf1f920a8b3fe9a8caa
Patch
Exploit