CVE-2019-1010232

MEDIUM

Juniper libslax - Out-of-bounds Write in slaxlexer.c slaxGetInput

Title source: llm
STIX 2.1

Description

Juniper juniper/libslax libslax latest version (as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018) is affected by: Buffer Overflow. The impact is: remote dos. The component is: slaxlexer.c:601(funtion:slaxGetInput). The attack vector is: ./slaxproc --slax-to-xslt POC0.

References (1)

Core 1
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1649175

Scores

CVSS v3 6.5
EPSS 0.0025
EPSS Percentile 48.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-787
Status published
Products (1)
juniper/libslax 0.22.0
Published Jul 22, 2019
Tracked Since Feb 18, 2026