Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2019-11068 PUBLISHED CVSS 9.800000190734863 CRITICAL

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.17libxslt1.1.33-r0, 1.1.26-r5, 1.1.26-r4
Alpine:v3.6libxslt1.1.29-r3, 1.1.29-r2, 1.1.29-r1
Alpine:v3.22libxslt1.1.28-r1, 1.1.33-r0, 1.1.32-r0
Alpine:v3.19libxslt0, 1.1.33-r0, 1.1.32-r0
Alpine:v3.16libxslt1.1.24-r0, 1.1.33-r0, 1.1.32-r0
Alpine:v3.23libxslt1.1.33-r0, 1.1.24-r0, 1.1.24-r1
Alpine:v3.14libxslt0, 1.1.26-r1, 1.1.26-r0
Alpine:v3.18libxslt1.1.30-r0, 1.1.26-r2, 1.1.26-r3
Alpine:v3.7libxslt1.1.24-r1, 0, 1.1.24-r0
Alpine:v3.21libxslt1.1.33-r0, 1.1.27-r0, 1.1.26-r9
Alpine:v3.13libxslt1.1.32-r0, 1.1.32-r0, 1.1.31-r0
Alpine:v3.10libxslt0, 1.1.24-r1, 1.1.26-r0
Alpine:v3.9libxslt1.1.26-r2, 1.1.26-r3, 1.1.26-r4
Alpine:v3.15libxslt1.1.32-r0, 1.1.31-r0, 1.1.30-r0
Alpine:v3.8libxslt1.1.32-r0, 1.1.31-r0, 1.1.30-r0
Alpine:v3.11libxslt1.1.33-r0, 1.1.31-r0, 1.1.30-r0
Alpine:v3.20libxslt1.1.26-r2, 1.1.28-r0, 1.1.28-r1
Alpine:v3.12libxslt1.1.24-r0, 1.1.26-r1, 1.1.26-r0

Timeline

References

Open in Interactive Console →