CVE-2016-1683 PUBLISHED

numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.

EPSS 0.99% · 76.7th percentile

Risk Scores

EPSS Score
0.99%
76.7th percentile

Affected Products

VendorProductVersions
Cloudflareaccess
Ubuntu:16.04:LTSoxide-qt1.14.9-0ubuntu0.16.04.1, 1.14.7-0ubuntu1, 1.13.6-0ubuntu1
Ubuntu:14.04:LTSoxide-qt1.11.3-0ubuntu0.14.04.1, 0, 1.0.0~bzr437-0ubuntu1
Ubuntu:16.04:LTSlibxslt1.1.28-2build2, 0, 1.1.28-2.1
Ubuntu:16.04:LTSchromium-browser47.0.2526.73-0ubuntu1.1218, 47.0.2526.106-0ubuntu1.1221, 48.0.2564.116-0ubuntu1.1229
Ubuntu:14.04:LTSlibxslt1.1.28-2build1, 1.1.28-2, 0
Ubuntu:14.04:LTSchromium-browser47.0.2526.106-0ubuntu0.14.04.1.1107, 48.0.2564.82-0ubuntu0.14.04.1.1108, 48.0.2564.116-0ubuntu0.14.04.1.1111

Timeline

References

Open in Interactive Console →