ALT-PU-2025-14808-3
Closed vulnerabilities
Published: 2025-04-01
Modified: 2025-12-03
Modified: 2025-12-03
BDU:2025-03640
Уязвимость файла numbers.ct библиотеки libxslt, позволяющая нарушителю выполнить произвольный код
Severity: HIGH (7.8)
Vector: AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Severity: MEDIUM (5.6)
Vector: AV:L/AC:H/Au:N/C:N/I:C/A:C
References:
Published: 2025-04-01
Modified: 2025-12-03
Modified: 2025-12-03
BDU:2025-03641
Уязвимость функции xsltGetInheritedNsList библиотеки libxslt, позволяющая нарушителю оказать влияние на целостность и доступность защищаемой информации
Severity: HIGH (7.8)
Vector: AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Severity: MEDIUM (5.6)
Vector: AV:L/AC:H/Au:N/C:N/I:C/A:C
References:
Published: 2025-03-14
Modified: 2025-11-03
Modified: 2025-11-03
CVE-2024-55549
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
Severity: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2025-03-14
Modified: 2025-11-03
Modified: 2025-11-03
CVE-2025-24855
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.
Severity: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References: