Out-of-Bounds Affecting libxslt package, versions <1.1.29-1
Snyk CVSS
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIAN9-LIBXSLT-453432
- published 22 Jul 2016
- disclosed 22 Jul 2016
Introduced: 22 Jul 2016
CVE-2016-4608 Open this link in a new tabHow to fix?
Upgrade Debian:9
libxslt
to version 1.1.29-1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream libxslt
package and not the libxslt
package as distributed by Debian
.
See How to fix?
for Debian:9
relevant fixed versions and status.
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.
References
- Apple Security Advisory
- Apple Security Advisory
- Apple Security Advisory
- Apple Security Advisory
- Apple Security Advisory
- Apple Security Advisory
- Apple Security Announcement
- Apple Security Announcement
- Apple Security Announcement
- Apple Security Announcement
- Apple Security Announcement
- Debian Security Tracker
- Fedora Security Update
- Security Focus
- Security Tracker
- Ubuntu CVE Tracker
- product-security@apple.com