CVE-2012-6139

At a glance

Severity: Not available
EPSS: EPSS 4.29 % · percentile 91 (2026-10-27)
State: PUBLISHED
Published: 2013-04-12
Updated: 2024-08-06
Assigner: redhat
NVD status: Modified

Description

libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.

Scores

Version	Score	Vector	Scored by
CVSS 2.0	MEDIUM 5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P	NVD · nvd@nist.gov (Primary)

European references

ENISA EUVD · EUVD-2012-6000
GCVE · GCVE-0-2012-6139

CERT-FR advisories

CERTFR-2023-AVI-0499 — Multiples vulnérabilités dans Tenable Nessus Network Monitor · cert.ssi.gouv.fr
CERTFR-2022-AVI-267 — Multiples vulnérabilités dans Juniper Networks Junos Space · cert.ssi.gouv.fr
CERTFR-2018-AVI-293 — Multiples vulnérabilités dans Tenable Nessus Agent · cert.ssi.gouv.fr
CERTFR-2018-AVI-288 — Multiples vulnérabilités dans Tenable Nessus · cert.ssi.gouv.fr
CERTFR-2014-AVI-193 — Multiples vulnérabilités dans Xerox FreeFlow Print Server · cert.ssi.gouv.fr
CERTFR-2014-AVI-112 — Multiples vulnérabilités dans Oracle Solaris · cert.ssi.gouv.fr
CERTA-2013-AVI-590 — Multiples vulnérabilités dans Oracle Solaris · cert.ssi.gouv.fr
CERTA-2013-AVI-543 — Multiples vulnérabilités dans Oracle Solaris · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:* ≤ 1.1.27
cpe:2.3:a:xmlsoft:libxslt:0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.5.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.6.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.7.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.9.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.10.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.11.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.12.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.13.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:0.14.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.13:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.14:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.15:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.16:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.17:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.18:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.19:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.20:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.21:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.22:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxslt:1.0.23:*:*:*:*:*:*:*
+41 more

Affected products

Product	Versions
	affected n/a

References

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD