CVE-2015-7995

libxslt: Type confusion may cause DoS

Published Nov 17, 2015 CVSS 2.0 · 5.0 Medium EPSS 4.3% KEV · Not listed
Description
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-514-1 libxslt security update
Debian DSA Debian DSA DSA-3605-1 libxslt security update
EUVD EUVD EUVD-2015-7891 The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
Ubuntu USN Ubuntu USN USN-3271-1 Libxslt vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.01461}

epss

{'score': 0.03037}

Type Values Removed Values Added
Metrics epss

{'score': 0.01371}

epss

{'score': 0.01461}

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:06 AM
Reserved
Oct 28, 2015, 12:00 AM
Status
Modified
Published
Nov 17, 2015, 3:59 PM
Modified
Jun 17, 2026, 12:33 AM
Severity
Moderate
Public date
Aug 26, 2015, 12:00 AM