gsd-2019-13118
Vulnerability from gsd
Modified
2022-05-24 00:00
Details
In `numbers.c` in libxslt 1.1.33, a type holding grouping characters of an `xsl:number` instruction was too narrow and an invalid character/length combination could be passed to `xsltNumberFormatDecimal`, leading to a read of uninitialized stack data.
Nokogiri prior to version 1.10.5 used a vulnerable version of libxslt. Nokogiri 1.10.5 updated libxslt to version 1.1.34 to address this and other vulnerabilities in libxslt.
Aliases
Aliases
{ GSD: { alias: "CVE-2019-13118", description: "In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.", id: "GSD-2019-13118", references: [ "https://www.suse.com/security/cve/CVE-2019-13118.html", "https://ubuntu.com/security/CVE-2019-13118", "https://advisories.mageia.org/CVE-2019-13118.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { affected: [ { package: { ecosystem: "RubyGems", name: "nokogiri", purl: "pkg:gem/nokogiri", }, }, ], aliases: [ "CVE-2019-13118", "GHSA-cf46-6xxh-pc75", ], details: "In `numbers.c` in libxslt 1.1.33, a type holding grouping characters of an `xsl:number` instruction was too narrow and an invalid character/length combination could be passed to `xsltNumberFormatDecimal`, leading to a read of uninitialized stack data.\n\nNokogiri prior to version 1.10.5 used a vulnerable version of libxslt. Nokogiri 1.10.5 updated libxslt to version 1.1.34 to address this and other vulnerabilities in libxslt.", id: "GSD-2019-13118", modified: "2022-05-24T00:00:00.000Z", published: "2022-05-24T00:00:00.000Z", references: [ { type: "WEB", url: "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069", }, { type: "WEB", url: "https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b", }, { type: "WEB", url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E", }, { type: "WEB", url: "https://lists.debian.org/debian-lts-announce/2019/07/msg00020.html", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IOYJKXPQCUNBMMQJWYXOR6QRUJZHEDRZ/", }, { type: "WEB", url: "https://oss-fuzz.com/testcase-detail/5197371471822848", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Aug/21", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Aug/22", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Aug/23", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Aug/25", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Jul/35", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Jul/36", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Jul/37", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Jul/40", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Jul/41", }, { type: "WEB", url: "https://seclists.org/bugtraq/2019/Jul/42", }, { type: "WEB", url: "https://security.netapp.com/advisory/ntap-20190806-0004/", }, { type: "WEB", url: "https://security.netapp.com/advisory/ntap-20200122-0003/", }, { type: "WEB", url: "https://support.apple.com/kb/HT210346", }, { type: "WEB", url: "https://support.apple.com/kb/HT210348", }, { type: "WEB", url: "https://support.apple.com/kb/HT210351", }, { type: "WEB", url: "https://support.apple.com/kb/HT210353", }, { type: "WEB", url: "https://support.apple.com/kb/HT210356", }, { type: "WEB", url: "https://support.apple.com/kb/HT210357", }, { type: "WEB", url: "https://support.apple.com/kb/HT210358", }, { type: "WEB", url: "https://usn.ubuntu.com/4164-1/", }, { type: "WEB", url: "https://www.oracle.com/security-alerts/cpujan2020.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Aug/11", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Aug/13", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Aug/14", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Aug/15", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Jul/22", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Jul/23", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Jul/24", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Jul/26", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Jul/31", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Jul/37", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2019/Jul/38", }, { type: "WEB", url: "http://www.openwall.com/lists/oss-security/2019/11/17/2", }, { type: "WEB", url: "https://github.com/sparklemotion/nokogiri/issues/1943", }, { type: "WEB", url: "https://github.com/sparklemotion/nokogiri/commit/43a175339b47b8c604508813fc75b83f13cd173e", }, { type: "WEB", url: "https://github.com/sparklemotion/nokogiri/blob/f7aa3b0b29d6fe5fafe93dacd9b96b6b3d16b7ec/CHANGELOG.md?plain=1#L796", }, { type: "WEB", url: "https://github.com/sparklemotion/nokogiri/releases/tag/v1.10.5", }, ], schema_version: "1.4.0", severity: [ { score: 7.5, type: "CVSS_V3", }, ], summary: "libxslt Type Confusion vulnerability that affects Nokogiri", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2019-13118", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b", refsource: "MISC", url: "https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b", }, { name: "https://oss-fuzz.com/testcase-detail/5197371471822848", refsource: "MISC", url: "https://oss-fuzz.com/testcase-detail/5197371471822848", }, { name: "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069", refsource: "MISC", url: "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069", }, { name: "https://support.apple.com/kb/HT210348", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210348", }, { name: "https://support.apple.com/kb/HT210353", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210353", }, { name: "https://support.apple.com/kb/HT210351", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210351", }, { name: "[debian-lts-announce] 20190722 [SECURITY] [DLA 1860-1] libxslt security update", refsource: "MLIST", url: "https://lists.debian.org/debian-lts-announce/2019/07/msg00020.html", }, { name: "https://support.apple.com/kb/HT210346", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210346", }, { name: "20190723 APPLE-SA-2019-7-22-1 iOS 12.4", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Jul/35", }, { name: "20190723 APPLE-SA-2019-7-22-5 tvOS 12.4", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Jul/37", }, { name: "20190723 APPLE-SA-2019-7-22-4 watchOS 5.3", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Jul/36", }, { name: "20190723 APPLE-SA-2019-7-22-4 watchOS 5.3", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Jul/24", }, { name: "20190723 APPLE-SA-2019-7-22-1 iOS 12.4", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Jul/23", }, { name: "20190723 APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Jul/22", }, { name: "20190723 APPLE-SA-2019-7-22-5 tvOS 12.4", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Jul/26", }, { name: "https://support.apple.com/kb/HT210356", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210356", }, { name: "https://support.apple.com/kb/HT210357", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210357", }, { name: "https://support.apple.com/kb/HT210358", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210358", }, { name: "20190724 APPLE-SA-2019-7-23-2 iTunes for Windows 12.9.6", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Jul/42", }, { name: "20190724 APPLE-SA-2019-7-23-3 iCloud for Windows 10.6", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Jul/40", }, { name: "20190724 APPLE-SA-2019-7-23-1 iCloud for Windows 7.13", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Jul/41", }, { name: "20190726 APPLE-SA-2019-7-23-3 iCloud for Windows 10.6", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Jul/31", }, { name: "20190726 APPLE-SA-2019-7-23-1 iCloud for Windows 7.13", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Jul/37", }, { name: "20190726 APPLE-SA-2019-7-23-2 iTunes for Windows 12.9.6", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Jul/38", }, { name: "https://security.netapp.com/advisory/ntap-20190806-0004/", refsource: "CONFIRM", url: "https://security.netapp.com/advisory/ntap-20190806-0004/", }, { name: "20190814 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Aug/25", }, { name: "20190814 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Aug/22", }, { name: "20190814 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Aug/23", }, { name: "20190814 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Aug/21", }, { name: "20190816 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Aug/14", }, { name: "20190816 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Aug/11", }, { name: "20190816 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Aug/13", }, { name: "20190816 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Aug/15", }, { name: "USN-4164-1", refsource: "UBUNTU", url: "https://usn.ubuntu.com/4164-1/", }, { name: "FEDORA-2019-fdf6ec39b4", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IOYJKXPQCUNBMMQJWYXOR6QRUJZHEDRZ/", }, { name: "[oss-security] 20191117 Nokogiri security update v1.10.5", refsource: "MLIST", url: "http://www.openwall.com/lists/oss-security/2019/11/17/2", }, { name: "https://www.oracle.com/security-alerts/cpujan2020.html", refsource: "MISC", url: "https://www.oracle.com/security-alerts/cpujan2020.html", }, { name: "https://security.netapp.com/advisory/ntap-20200122-0003/", refsource: "CONFIRM", url: "https://security.netapp.com/advisory/ntap-20200122-0003/", }, { name: "openSUSE-SU-2020:0731", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html", }, { name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8", refsource: "MLIST", url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E", }, { name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8", refsource: "MLIST", url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E", }, ], }, }, "github.com/rubysec/ruby-advisory-db": { cve: "2019-13118", cvss_v3: 7.5, date: "2022-05-24", description: "In `numbers.c` in libxslt 1.1.33, a type holding grouping characters of an `xsl:number` instruction was too narrow and an invalid character/length combination could be passed to `xsltNumberFormatDecimal`, leading to a read of uninitialized stack data.\n\nNokogiri prior to version 1.10.5 used a vulnerable version of libxslt. Nokogiri 1.10.5 updated libxslt to version 1.1.34 to address this and other vulnerabilities in libxslt.", gem: "nokogiri", ghsa: "cf46-6xxh-pc75", patched_versions: [ ">= 1.10.5", ], related: { url: [ "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069", "https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b", "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E", "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E", "https://lists.debian.org/debian-lts-announce/2019/07/msg00020.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IOYJKXPQCUNBMMQJWYXOR6QRUJZHEDRZ/", "https://oss-fuzz.com/testcase-detail/5197371471822848", "https://seclists.org/bugtraq/2019/Aug/21", "https://seclists.org/bugtraq/2019/Aug/22", "https://seclists.org/bugtraq/2019/Aug/23", "https://seclists.org/bugtraq/2019/Aug/25", "https://seclists.org/bugtraq/2019/Jul/35", "https://seclists.org/bugtraq/2019/Jul/36", "https://seclists.org/bugtraq/2019/Jul/37", "https://seclists.org/bugtraq/2019/Jul/40", "https://seclists.org/bugtraq/2019/Jul/41", "https://seclists.org/bugtraq/2019/Jul/42", "https://security.netapp.com/advisory/ntap-20190806-0004/", "https://security.netapp.com/advisory/ntap-20200122-0003/", "https://support.apple.com/kb/HT210346", "https://support.apple.com/kb/HT210348", "https://support.apple.com/kb/HT210351", "https://support.apple.com/kb/HT210353", "https://support.apple.com/kb/HT210356", "https://support.apple.com/kb/HT210357", "https://support.apple.com/kb/HT210358", "https://usn.ubuntu.com/4164-1/", "https://www.oracle.com/security-alerts/cpujan2020.html", "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html", "http://seclists.org/fulldisclosure/2019/Aug/11", "http://seclists.org/fulldisclosure/2019/Aug/13", "http://seclists.org/fulldisclosure/2019/Aug/14", "http://seclists.org/fulldisclosure/2019/Aug/15", "http://seclists.org/fulldisclosure/2019/Jul/22", "http://seclists.org/fulldisclosure/2019/Jul/23", "http://seclists.org/fulldisclosure/2019/Jul/24", "http://seclists.org/fulldisclosure/2019/Jul/26", "http://seclists.org/fulldisclosure/2019/Jul/31", "http://seclists.org/fulldisclosure/2019/Jul/37", "http://seclists.org/fulldisclosure/2019/Jul/38", "http://www.openwall.com/lists/oss-security/2019/11/17/2", "https://github.com/sparklemotion/nokogiri/issues/1943", "https://github.com/sparklemotion/nokogiri/commit/43a175339b47b8c604508813fc75b83f13cd173e", "https://github.com/sparklemotion/nokogiri/blob/f7aa3b0b29d6fe5fafe93dacd9b96b6b3d16b7ec/CHANGELOG.md?plain=1#L796", "https://github.com/sparklemotion/nokogiri/releases/tag/v1.10.5", ], }, title: "libxslt Type Confusion vulnerability that affects Nokogiri", url: "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069", }, "gitlab.com": { advisories: [ { affected_range: "<1.10.5", affected_versions: "All versions before 1.10.5", cvss_v2: "AV:N/AC:L/Au:N/C:P/I:N/A:N", cvss_v3: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", cwe_ids: [ "CWE-1035", "CWE-843", "CWE-937", ], date: "2019-07-22", description: "In `numbers.c` in libxslt, which is used by nokogiri, a type holding grouping characters of an `xsl:number` instruction was too narrow and an invalid character/length combination could be passed to `xsltNumberFormatDecimal`, leading to a read of uninitialized stack data.", fixed_versions: [ "1.10.5", ], identifier: "CVE-2019-13118", identifiers: [ "CVE-2019-13118", ], not_impacted: "All versions starting from 1.10.5", package_slug: "gem/nokogiri", pubdate: "2019-06-30", solution: "Upgrade to version 1.10.5 or above.", title: "Improper Input Validation", urls: [ "https://nvd.nist.gov/vuln/detail/CVE-2019-13118", ], uuid: "e81fe131-f92b-4449-bc54-ca2baa35b06f", }, ], }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:xmlsoft:libxslt:1.1.33:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:santricity_unified_manager:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "11.50.2", versionStartIncluding: "11.0", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:oracle:jdk:1.8.0:update231:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "12.4", vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "12.4", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*", cpe_name: [], versionEndExcluding: "7.13", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*", cpe_name: [], versionEndExcluding: "12.9.6", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*", cpe_name: [], versionEndExcluding: "10.6", versionStartIncluding: "10.0", vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2019-003:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2019-002:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2019-001:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "10.14.6", versionStartIncluding: "10.4.6", vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2019-13118", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-843", }, ], }, ], }, references: { reference_data: [ { name: "https://oss-fuzz.com/testcase-detail/5197371471822848", refsource: "MISC", tags: [ "Permissions Required", ], url: "https://oss-fuzz.com/testcase-detail/5197371471822848", }, { name: "https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b", refsource: "MISC", tags: [ "Patch", "Third Party Advisory", ], url: "https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b", }, { name: "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069", refsource: "MISC", tags: [ "Permissions Required", ], url: "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069", }, { name: "https://support.apple.com/kb/HT210346", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210346", }, { name: "[debian-lts-announce] 20190722 [SECURITY] [DLA 1860-1] libxslt security update", refsource: "MLIST", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://lists.debian.org/debian-lts-announce/2019/07/msg00020.html", }, { name: "https://support.apple.com/kb/HT210353", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210353", }, { name: "https://support.apple.com/kb/HT210348", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210348", }, { name: "https://support.apple.com/kb/HT210351", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210351", }, { name: "20190723 APPLE-SA-2019-7-22-5 tvOS 12.4", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Jul/37", }, { name: "20190723 APPLE-SA-2019-7-22-4 watchOS 5.3", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Jul/36", }, { name: "20190723 APPLE-SA-2019-7-22-1 iOS 12.4", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Jul/35", }, { name: "20190723 APPLE-SA-2019-7-22-4 watchOS 5.3", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Jul/24", }, { name: "20190723 APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Jul/22", }, { name: "20190723 APPLE-SA-2019-7-22-5 tvOS 12.4", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Jul/26", }, { name: "https://support.apple.com/kb/HT210356", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210356", }, { name: "20190723 APPLE-SA-2019-7-22-1 iOS 12.4", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Jul/23", }, { name: "https://support.apple.com/kb/HT210357", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210357", }, { name: "https://support.apple.com/kb/HT210358", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210358", }, { name: "20190724 APPLE-SA-2019-7-23-1 iCloud for Windows 7.13", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Jul/41", }, { name: "20190724 APPLE-SA-2019-7-23-2 iTunes for Windows 12.9.6", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Jul/42", }, { name: "20190724 APPLE-SA-2019-7-23-3 iCloud for Windows 10.6", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Jul/40", }, { name: "20190726 APPLE-SA-2019-7-23-3 iCloud for Windows 10.6", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Jul/31", }, { name: "20190726 APPLE-SA-2019-7-23-2 iTunes for Windows 12.9.6", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Jul/38", }, { name: "20190726 APPLE-SA-2019-7-23-1 iCloud for Windows 7.13", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Jul/37", }, { name: "https://security.netapp.com/advisory/ntap-20190806-0004/", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://security.netapp.com/advisory/ntap-20190806-0004/", }, { name: "20190814 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Aug/25", }, { name: "20190814 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Aug/23", }, { name: "20190814 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Aug/21", }, { name: "20190814 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Aug/22", }, { name: "20190816 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Aug/14", }, { name: "20190816 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Aug/13", }, { name: "20190816 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Aug/11", }, { name: "20190816 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Aug/15", }, { name: "USN-4164-1", refsource: "UBUNTU", tags: [ "Third Party Advisory", ], url: "https://usn.ubuntu.com/4164-1/", }, { name: "FEDORA-2019-fdf6ec39b4", refsource: "FEDORA", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IOYJKXPQCUNBMMQJWYXOR6QRUJZHEDRZ/", }, { name: "[oss-security] 20191117 Nokogiri security update v1.10.5", refsource: "MLIST", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://www.openwall.com/lists/oss-security/2019/11/17/2", }, { name: "https://www.oracle.com/security-alerts/cpujan2020.html", refsource: "MISC", tags: [ "Third Party Advisory", ], url: "https://www.oracle.com/security-alerts/cpujan2020.html", }, { name: "https://security.netapp.com/advisory/ntap-20200122-0003/", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://security.netapp.com/advisory/ntap-20200122-0003/", }, { name: "openSUSE-SU-2020:0731", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html", }, { name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8", refsource: "MLIST", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E", }, { name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8", refsource: "MLIST", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: false, cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 1.4, }, }, lastModifiedDate: "2023-04-10T15:52Z", publishedDate: "2019-07-01T02:15Z", }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.