CVE-2019-13118
—CVSS 3.1
5.3 medium
EPSS
5%p92
Published
()
Modified
Description
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.
- Vendors
- xmlsoftopensusenetapporaclefedoraprojectcanonicalapple
- Products
- libxslt, leap, active iq unified manager, cloud backup, clustered data ontap, e-series performance analyzer, e-series santricity management plug-ins, e-series santricity os controller, e-series santricity storage manager, e-series santricity web services, oncommand insight, oncommand workflow automation
- Weakness
- CWE-843
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.