Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-13117 →
DEBIAN-CVE-2019-13117
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This co...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-2.1"}]}]
Debian:13
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-2.1"}]}]
Debian:14
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-2.1"}]}]
Références
- advisory security-tracker.debian.org