Information disclosure in libxslt - CVE-2019-13118

Vulnerability identifier: #VU18966

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-13118

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to uninitialized stack data exposure in numbers.c in libxslt library when processing an invalid character/length combination in xsltNumberFormatDecimal. A remote attacker can gain pass specially crafted data to the application using the affected library and gain access to sensitive information.

libxslt
libxslt (Ubuntu package)
libxslt (Alpine package)
libxslt
Secure Remote Services (SRS) Virtual Edition
EMC ECS
Oracle Java SE
Opensuse
Fedora
Wyse ThinLinux
Dell EMC Unity Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Data Protection Search

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

libxslt (Ubuntu package) - addressed in versions 1.1.28-2.1ubuntu0.3, 1.1.29-5ubuntu0.2, 1.1.32-2ubuntu0.2, 1.1.33-0ubuntu1.1
libxslt (Alpine package) - update to 1.1.33-r3
Secure Remote Services (SRS) Virtual Edition - update to 3.46.00.04
libxslt - update to 1.1.33-4.fc31
Wyse ThinLinux - update to 2.2.1.01
EMC ECS - update to 3.5.0.1
Dell EMC Unity Operating Environment (OE) - update to 5.0.3.0.5.014
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.3.0.5.014
Dell EMC Data Protection Search - update to 19.3.0

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069
• https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b
• https://oss-fuzz.com/testcase-detail/5197371471822848

• Multiple vulnerabilities in libxslt
• Ubuntu update for Libxslt
• OpenSUSE Linux update for libxslt
• Multiple vulnerabilities in Java SE
• Information disclosure in libxslt (Alpine package)
• Multiple vulnerabilities in Dell EMC ECS
• Multiple vulnerabilities in Dell EMC Secure Remote Services (SRS) Virtual Edition
• Multiple vulnerabilities in Dell EMC Data Protection Search
• Multiple vulnerabilities in Dell Wyse ThinLinux
• Fedora 31 update for libxslt
• Dell EMC Unity update for third-party components