Buffer overflow in libxslt - CVE-2019-18197

Vulnerability identifier: #VU21942

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-18197

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the xsltCopyText() function in transform.c in libxslt. A remote attacker can create a specially crafted XML document, pass it to the affected application, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

libxslt
SUSE Package Hub for SUSE Linux Enterprise
Arch Linux
Amazon Linux AMI
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
SUSE Linux
Opensuse
libxslt (Red Hat package)
libxslt (Alpine package)
libxslt (Ubuntu package)
BIG-IP
Data Computing Appliance (DCA)
Secure Remote Services (SRS) Virtual Edition
EMC ECS
Solutions Enabler
Unisphere for PowerMax
Unisphere for PowerMax Virtual Appliance
OpenShift Data Foundation (formerly OpenShift Container Storage)
Solutions Enabler Virtual Appliance
Traffix SDC
Red Hat OpenShift Container Platform
IBM QRadar Network Security
BIG-IQ
Oracle Java SE
Dell EMC Data Protection Search
Google Chrome

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

libxslt (Red Hat package) - addressed in versions 1.1.28-6.el7, 1.1.32-5.el8
BIG-IP - update to 17.0.0
Data Computing Appliance (DCA) - update to 3.5.5.0
Secure Remote Services (SRS) Virtual Edition - update to 3.46.00.04
Traffix SDC - update to 5.2.0
IBM QRadar Network Security - addressed in versions 5.4.0.13, 5.5.0.8
libxslt (Alpine package) - update to 1.1.31-r2
libxslt (Ubuntu package) - addressed in versions 1.1.28-2.1ubuntu0.3, 1.1.29-5ubuntu0.2, 1.1.32-2ubuntu0.2, 1.1.33-0ubuntu1.1
EMC ECS - addressed in versions 3.5.1.1, 3.6
Red Hat OpenShift Container Platform - update to 4.3.40
Solutions Enabler Virtual Appliance - addressed in versions 9.0.0.19, 9.1.0.6
Solutions Enabler - addressed in versions 9.0.0.19, 9.1.0.6
Unisphere for PowerMax - addressed in versions 9.0.2.18, 9.1.0.17
Unisphere for PowerMax Virtual Appliance - addressed in versions 9.0.2.18, 9.1.0.17
Dell EMC Data Protection Search - update to 19.3.0
Google Chrome - update to 80.0.3987.87

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914
• https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285

• Multiple vulnerabilities in libxslt
• Ubuntu update for Libxslt
• Multiple vulnerabilities in Google Chrome
• Arch Linux update for chromium
• OpenSUSE Linux update for chromium
• OpenSUSE Linux update for chromium
• Red Hat update for chromium-browser
• OpenSUSE Linux update for chromium, re2
• Multiple vulnerabilities in Java SE
• OpenSUSE Linux update for libxslt
• Buffer overflow in libxslt (Alpine package)
• Red Hat Enterprise Linux 7 update for libxslt
• Red Hat Enterprise Linux 8 update for libxslt
• Amazon Linux AMI update for libxslt
• Multiple vulnerabilities in Red Hat OpenShift Container Storage
• Amazon Linux AMI update for libxslt
• Multiple vulnerabilities in IBM QRadar Network Security
• Buffer overflow in F5 BIG-IP BaseOS component
• Buffer overflow in BIG-IQ Centralized Management BaseOS component
• Buffer overflow in Traffix SDC BaseOS component
• Multiple vulnerabilities in Dell EMC ECS
• Multiple vulnerabilities in Dell EMC Secure Remote Services (SRS) Virtual Edition
• Multiple vulnerabilities in Dell EMC Unisphere for PowerMax and Dell EMC Solutions Enabler
• Multiple vulnerabilities in Dell EMC Data Protection Search
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.3