NetSight
IP …
high7.5

CVE-2019-18197

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances.

Impact

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.

Affected products

VendorProductAffected versions
XmlsoftLibxslt
Version 1.1.33
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 19.04, 19.10
DebianDebian Linux
Version 8.0

Weakness classification

CWE-416CWE-908

References