Fixed
Created: Jul 2, 2019
Updated: Jul 16, 2019
Resolved Date: Jul 14, 2019
Found In Version: 10.18.44.1
Fix Version: 10.18.44.9
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.
CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-13117 User=admin}
