Permissions, Privileges, and Access Controls in libxslt - CVE-2019-11068

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU18276

Permissions, Privileges, and Access Controls in libxslt - CVE-2019-11068

Published: April 16, 2019


Vulnerability identifier: #VU18276
CSH Severity: Medium
CVSS v4 BT: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2019-11068
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass certain security restrictions.

The vulnerability exists due to an error within the xsltCheckRead() and xsltCheckWrite() functions when processing requests from remote servers. A remote attacker can trick the victim into opening a specially crafted URL that will result in "-1 error" code but the URL itself will be processed by the application later.

Successful exploitation of the vulnerability may allow an attacker to bypass certain security restrictions and perform XXE attacks.

Affected software

libxslt
Amazon Linux AMI
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Opensuse
Fedora
libxslt (Alpine package)
libxslt (Ubuntu package)
libxslt (Red Hat package)
libxslt
Data Computing Appliance (DCA)
Dell Support Assist Enterprise
EMC ECS
Dell PowerProtect Cyber Recovery
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM QRadar Network Security
Oracle Java SE
Red Hat OpenShift Container Platform
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
Dell EMC Unity Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Data Protection Search
EMC Data Protection Advisor

How to mitigate CVE-2019-11068

Install updates from vendor's GIT repository.

libxslt (Alpine package) - update to 1.1.29-r4
libxslt (Ubuntu package) - addressed in versions 1.1.28-2ubuntu0.2, 1.1.28-2.1ubuntu0.2, 1.1.29-5ubuntu0.1, 1.1.32-2ubuntu0.1
libxslt (Red Hat package) - addressed in versions 1.1.28-6.el7, 1.1.32-5.el8
Data Computing Appliance (DCA) - update to 3.5.5.0
Dell Support Assist Enterprise - update to 4.00.06.00
IBM QRadar Network Security - addressed in versions 5.4.0.13, 5.5.0.8
libxslt - addressed in versions 1.1.33-1.fc29, 1.1.33-1.fc30
EMC ECS - update to 3.5.0.1
Red Hat OpenShift Container Platform - update to 4.3.40
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.10.0.0
EMC ViPR SRM - update to 4.10.0.0
Dell EMC Unity Operating Environment (OE) - update to 5.0.3.0.5.014
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.3.0.5.014
Dell PowerProtect Cyber Recovery - update to 18.1.1.2-8
Dell EMC Data Protection Search - update to 19.2
EMC Data Protection Advisor - update to 19.3

External References

Related Security Bulletins