Wind River Support Network

HomeDefectsLIN1019-3745

Fixed

LIN1019-3745 : Security Advisory - libxslt - CVE-2019-5815

Created: Dec 10, 2019 Updated: May 13, 2022

Resolved Date: Dec 31, 2019

Found In Version: 10.19.45.1

Fix Version: 10.19.45.3

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.

CREATE(Triage):(User=admin) CVE-2019-5815 (https://nvd.nist.gov/vuln/detail/CVE-2019-5815)

CVEs

CVE-2019-5815