CVE-2015-7995

libxslt 1.1.28 - DoS

Title source: llm

Description

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.

References (22)

Core 22

Core References

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2016/dsa-3605

Mailing List mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2015/10/27/10

Mailing List mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2015/10/28/4

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html

Various Sources x_refsource_confirm

https://puppet.com/security/cve/cve-2015-7995

Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html

Patch x_refsource_confirm

https://git.gnome.org/browse/libxslt/commit/?id=7ca19df892ca22d9314e95d59ce2abdeff46b617

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/77325

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html

Vendor Advisory vendor-advisory x_refsource_slackware

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.386546