FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

libxslt -- security framework bypass

Affected packages
libxslt < 1.1.33

Details

VuXML ID 93167bef-9752-11e9-b61c-b885849ded8e
Discovery 2019-04-10
Entry 2019-07-16

Mitre report:

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.

[source]

References

URL https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11068

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.

OSZAR »