Wind River Support Network

HomeDefectsLIN9-9190
Fixed

LIN9-9190 : Security Advisory - libxslt - CVE-2019-18197

Created: Oct 20, 2019    Updated: Apr 22, 2022
Resolved Date: Nov 7, 2019
Found In Version: 9.0.0.1
Fix Version: 9.0.0.24
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.

CREATE(Triage):(User=admin) CVE-2019-18197 (https://nvd.nist.gov/vuln/detail/CVE-2019-18197)

CVEs


Live chat
Online