Debian DSA-2555-1 : libxslt - several vulnerabilities
medium Nessus Plugin ID 62440
Language:
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
The remote Debian host is missing a security-related update.Description
Nicholas Gregoire and Cris Neckar discovered several memory handling bugs in libxslt, which could lead to denial of service or the execution of arbitrary code if a malformed document is processed.Solution
Upgrade the libxslt packages.For the stable distribution (squeeze), these problems have been fixed in version 1.1.26-6+squeeze2.
See Also
Plugin Details
Severity: Medium
ID: 62440
File Name: debian_DSA-2555.nasl
Version: 1.11
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 10/6/2012
Updated: 1/11/2021
Dependencies: ssh_get_info.nasl
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Temporal Vector: E:U/RL:OF/RC:C
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:libxslt, cpe:/o:debian:debian_linux:6.0
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Ease: No known exploits are available
Patch Publication Date: 10/5/2012
Reference Information
DSA: 2555