{"id":"CVE-2017-5029","aliases":["ALPINE-CVE-2017-5029","BELL-CVE-2017-5029","DEBIAN-CVE-2017-5029","DLA-866-1","DSA-3810-1","EUVD-2018-0301","GHSA-pf6m-fxpq-fg8v","MGASA-2017-0111","MGASA-2017-0125","RHSA-2017:0499","SUSE-SU-2017:1282-1","SUSE-SU-2017:1313-1","UBUNTU-CVE-2017-5029","USN-3236-1","USN-3271-1","openSUSE-SU-2017:0738-1","openSUSE-SU-2017:0740-1","openSUSE-SU-2024:11017-1","openSUSE-SU-2024:11340-1","openSUSE-SU-2024:11912-1","openSUSE-SU-2024:13165-1","openSUSE-SU-2024:14174-1","openSUSE-SU-2025:14697-1","openSUSE-SU-2026:10356-1"],"status":"published","title":"Nokogiri implementation of libxslt lacks integer overflow checks","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02528,"percentile":0.85005,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2017-03-10T00:00:00Z","modified":"2026-09-06T07:15:08Z","fixes":[{"ecosystem":"RubyGems","package":"nokogiri","fixed_in":["1.7.2"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.10","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.2","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libxslt","fixed_in":["1.1.29-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxslt","fixed_in":["1.1.29-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxslt","fixed_in":["1.1.29-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxslt","fixed_in":["1.1.29-2.1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libxslt","fixed_in":["1.1.26-14.1+deb7u3"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"libxslt","fixed_in":["1.1.29-1.2.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"chromium-browser","fixed_in":["58.0.3029.81-0ubuntu0.14.04.1172"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libxslt","fixed_in":["1.1.28-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"oxide-qt","fixed_in":["1.21.5-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"chromium-browser","fixed_in":["57.0.2987.98-0ubuntu0.16.04.1276"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libxslt","fixed_in":["1.1.28-2.1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"oxide-qt","fixed_in":["1.21.5-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-2.1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.26-14.1+deb7u3"}]}],"versions":["1.1.26-14.1","1.1.26-14.1+deb7u1","1.1.26-14.1+deb7u2"]},{"source":"osv","ecosystem":"Debian:8","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-1~deb8u1"}]}],"versions":["41.0.2272.118-1","42.0.2311.135-1","42.0.2311.135-1~deb8u1","42.0.2311.135-2","42.0.2311.90-1","42.0.2311.90-1~deb8u1","42.0.2311.90-2","43.0.2357.124-1","43.0.2357.124-2","43.0.2357.124-3","43.0.2357.130-1","43.0.2357.65-1","43.0.2357.65-1~deb8u1","43.0.2357.81-1","44.0.2403.107-1","44.0.2403.107-2","44.0.2403.157-1","44.0.2403.89-1","44.0.2403.89-1~deb8u1","45.0.2454.101-1","45.0.2454.85-1","45.0.2454.85-1~deb8u1","46.0.2490.13-1","46.0.2490.71-1","46.0.2490.71-1~deb8u1","47.0.2526.111-1","47.0.2526.16-1","47.0.2526.73-1","47.0.2526.73-1~deb8u1","47.0.2526.80-1","47.0.2526.80-1~deb8u1","47.0.2526.80-2","47.0.2526.80-3","48.0.2564.116-1","48.0.2564.116-1~deb8u1","48.0.2564.23-1","48.0.2564.82-1","48.0.2564.82-1~deb8u1","48.0.2564.82-2","49.0.2623.108-1","49.0.2623.108-1~deb8u1","49.0.2623.108-2","49.0.2623.75-1","49.0.2623.75-1~deb8u1","49.0.2623.75-2","49.0.2623.87-1","49.0.2623.87-1~deb8u1","50.0.2661.75-1","50.0.2661.75-1~deb8u1","50.0.2661.75-2","50.0.2661.94-1","50.0.2661.94-1~deb8u1","51.0.2704.63-1","51.0.2704.63-1~deb8u1","51.0.2704.63-2","51.0.2704.79-1","51.0.2704.79-1~deb8u1","52.0.2743.116-1","52.0.2743.116-1~deb8u1","52.0.2743.116-2","52.0.2743.82-1","52.0.2743.82-1~deb8u1","52.0.2743.82-2","52.0.2743.82-3","52.0.2743.82-4","53.0.2785.113-1","53.0.2785.113-1~deb8u1","53.0.2785.143-1","53.0.2785.143-1+exp1","53.0.2785.143-1~deb8u1","53.0.2785.89-1","53.0.2785.89-1~deb8u1","53.0.2785.92-1","53.0.2785.92-2","53.0.2785.92-3","54.0.2840.101-1","55.0.2883.75-1","55.0.2883.75-1~deb8u1","55.0.2883.75-2","55.0.2883.75-2+exp1","55.0.2883.75-2+exp2","55.0.2883.75-2+exp3","55.0.2883.75-3","55.0.2883.75-4","55.0.2883.75-5","55.0.2883.75-6","56.0.2924.76-1","56.0.2924.76-1~deb8u1","56.0.2924.76-2","56.0.2924.76-3","56.0.2924.76-4","56.0.2924.76-5"],"bundled":18},{"source":"osv","ecosystem":"RubyGems","package":"nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.1.0","1.1.1","1.2.0","1.2.1","1.2.2","1.2.3","1.3.0","1.3.1","1.3.2","1.3.3","1.4.0","1.4.1","1.4.2","1.4.2.1","1.4.3","1.4.3.1","1.4.4","1.4.4.1","1.4.4.2","1.4.5","1.4.6","1.4.7","1.5.0","1.5.0.beta.1","1.5.0.beta.2","1.5.0.beta.3","1.5.0.beta.4","1.5.1","1.5.1.rc1","1.5.10","1.5.11","1.5.2","1.5.3","1.5.3.rc2","1.5.3.rc3","1.5.3.rc4","1.5.3.rc5","1.5.3.rc6","1.5.4","1.5.4.rc1","1.5.4.rc2","1.5.4.rc3","1.5.5","1.5.5.rc1","1.5.5.rc2","1.5.5.rc3","1.5.6","1.5.6.rc1","1.5.6.rc2","1.5.6.rc3","1.5.7","1.5.7.rc1","1.5.7.rc2","1.5.7.rc3","1.5.8","1.5.9","1.6.0","1.6.0.rc1","1.6.1","1.6.2","1.6.2.1","1.6.2.rc1","1.6.2.rc2","1.6.2.rc3","1.6.3","1.6.3.1","1.6.3.rc1","1.6.3.rc2","1.6.3.rc3","1.6.4","1.6.4.1","1.6.5","1.6.6.1","1.6.6.2","1.6.6.3","1.6.6.4","1.6.7","1.6.7.1","1.6.7.2","1.6.7.rc2","1.6.7.rc3","1.6.7.rc4","1.6.8","1.6.8.1","1.6.8.rc1","1.6.8.rc2","1.6.8.rc3","1.7.0","1.7.0.1","1.7.1"]},{"source":"osv","ecosystem":"Mageia:5","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.133-1.mga5"}]}],"bundled":45},{"source":"osv","ecosystem":"Mageia:5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-1.2.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:57.0.2987.98-1.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"chromium-browser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:57.0.2987.98-1.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.24-19.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libxslt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.24-19.33.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.24-19.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.24-19.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"58.0.3029.81-0ubuntu0.14.04.1172"}]}],"versions":["29.0.1547.65-0ubuntu2","31.0.1650.63-0ubuntu1~20131204.1","32.0.1700.107-0ubuntu1~20140204.977.1","33.0.1750.152-0ubuntu1~pkg995.1","34.0.1847.116-0ubuntu2","36.0.1985.125-0ubuntu1.14.04.0~pkg1029","37.0.2062.94-0ubuntu0.14.04.1~pkg1042","37.0.2062.120-0ubuntu0.14.04.1~pkg1049","38.0.2125.111-0ubuntu0.14.04.1.1061","39.0.2171.65-0ubuntu0.14.04.1.1064","40.0.2214.94-0ubuntu0.14.04.1.1068","40.0.2214.111-0ubuntu0.14.04.1.1069","41.0.2272.76-0ubuntu0.14.04.1.1076","43.0.2357.81-0ubuntu0.14.04.1.1089","43.0.2357.130-0ubuntu0.14.04.1.1092","44.0.2403.89-0ubuntu0.14.04.1.1095","45.0.2454.85-0ubuntu0.14.04.1.1097","45.0.2454.101-0ubuntu0.14.04.1.1099","47.0.2526.73-0ubuntu0.14.04.1.1106","47.0.2526.106-0ubuntu0.14.04.1.1107","48.0.2564.82-0ubuntu0.14.04.1.1108","48.0.2564.116-0ubuntu0.14.04.1.1111","49.0.2623.87-0ubuntu0.14.04.1.1112","49.0.2623.108-0ubuntu0.14.04.1.1113","50.0.2661.102-0ubuntu0.14.04.1.1117","51.0.2704.79-0ubuntu0.14.04.1.1121","52.0.2743.116-0ubuntu0.14.04.1.1134","53.0.2785.143-0ubuntu0.14.04.1.1142","53.0.2785.143-0ubuntu0.14.04.1.1145"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2ubuntu0.1"}]}],"versions":["1.1.28-2","1.1.28-2build1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"oxide-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-0ubuntu0.14.04.1"}]}],"versions":["1.0.0~bzr437-0ubuntu1","1.0.0~bzr452-0ubuntu1","1.0.0~bzr475-0ubuntu1","1.0.0~bzr490-0ubuntu1","1.0.0~bzr501-0ubuntu1","1.0.0~bzr501-0ubuntu2","1.0.4-0ubuntu0.14.04.1","1.0.5-0ubuntu0.14.04.1","1.1.2-0ubuntu0.14.04.1","1.2.5-0ubuntu0.14.04.1","1.3.4-0ubuntu0.14.04.1","1.4.2-0ubuntu0.14.04.1","1.4.3-0ubuntu0.14.04.1","1.5.5-0ubuntu0.14.04.3","1.5.6-0ubuntu0.14.04.2","1.6.5-0ubuntu0.14.04.1","1.6.6-0ubuntu0.14.04.1","1.7.8-0ubuntu0.14.04.1","1.7.9-0ubuntu0.14.04.1","1.8.4-0ubuntu0.14.04.2","1.9.1-0ubuntu0.14.04.2","1.9.5-0ubuntu0.14.04.1","1.10.3-0ubuntu0.14.04.1","1.11.3-0ubuntu0.14.04.1","1.11.4-0ubuntu0.14.04.1","1.12.5-0ubuntu0.14.04.1","1.12.6-0ubuntu0.14.04.1","1.12.7-0ubuntu0.14.04.1","1.13.6-0ubuntu0.14.04.1","1.14.7-0ubuntu0.14.04.1","1.14.9-0ubuntu0.14.04.1","1.15.7-0ubuntu0.14.04.1","1.15.8-0ubuntu0.14.04.1","1.16.5-0ubuntu0.14.04.1","1.17.7-0ubuntu0.14.04.1","1.17.9-0ubuntu0.14.04.1","1.18.3-0ubuntu0.14.04.1","1.18.5-0ubuntu0.14.04.1","1.19.4-0ubuntu0.14.04.1","1.20.4-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-0ubuntu0.16.04.1276"}]}],"versions":["45.0.2454.101-0ubuntu1.1201","47.0.2526.73-0ubuntu1.1218","47.0.2526.106-0ubuntu1.1221","48.0.2564.82-0ubuntu1.1222","48.0.2564.116-0ubuntu1.1229","49.0.2623.87-0ubuntu1.1232","49.0.2623.108-0ubuntu1.1233","50.0.2661.102-0ubuntu0.16.04.1.1237","51.0.2704.79-0ubuntu0.16.04.1.1242","52.0.2743.116-0ubuntu0.16.04.1.1250","53.0.2785.143-0ubuntu0.16.04.1.1254","53.0.2785.143-0ubuntu0.16.04.1.1257","55.0.2883.87-0ubuntu0.16.04.1263","56.0.2924.76-0ubuntu0.16.04.1268"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2.1ubuntu0.1"}]}],"versions":["1.1.28-2build2","1.1.28-2.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"oxide-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-0ubuntu0.16.04.1"}]}],"versions":["1.9.5-0ubuntu1","1.10.3-0ubuntu0.15.10.1","1.10.3-0ubuntu0.15.10.2","1.11.3-0ubuntu3","1.11.4-0ubuntu1","1.11.5-0ubuntu1","1.12.5-0ubuntu1","1.12.6-0ubuntu1","1.12.7-0ubuntu1","1.13.6-0ubuntu1","1.14.7-0ubuntu1","1.14.9-0ubuntu0.16.04.1","1.15.7-0ubuntu0.16.04.1","1.15.8-0ubuntu0.16.04.1","1.16.5-0ubuntu0.16.04.1","1.17.7-0ubuntu0.16.04.1","1.17.9-0ubuntu0.16.04.1","1.18.3-0ubuntu0.16.04.1","1.18.5-0ubuntu0.16.04.1","1.19.4-0ubuntu0.16.04.1","1.20.4-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"oxide-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-0ubuntu0.14.04.1"}]}],"versions":["1.0.0~bzr437-0ubuntu1","1.0.0~bzr452-0ubuntu1","1.0.0~bzr475-0ubuntu1","1.0.0~bzr490-0ubuntu1","1.0.0~bzr501-0ubuntu1","1.0.0~bzr501-0ubuntu2","1.0.4-0ubuntu0.14.04.1","1.0.5-0ubuntu0.14.04.1","1.1.2-0ubuntu0.14.04.1","1.2.5-0ubuntu0.14.04.1","1.3.4-0ubuntu0.14.04.1","1.4.2-0ubuntu0.14.04.1","1.4.3-0ubuntu0.14.04.1","1.5.5-0ubuntu0.14.04.3","1.5.6-0ubuntu0.14.04.2","1.6.5-0ubuntu0.14.04.1","1.6.6-0ubuntu0.14.04.1","1.7.8-0ubuntu0.14.04.1","1.7.9-0ubuntu0.14.04.1","1.8.4-0ubuntu0.14.04.2","1.9.1-0ubuntu0.14.04.2","1.9.5-0ubuntu0.14.04.1","1.10.3-0ubuntu0.14.04.1","1.11.3-0ubuntu0.14.04.1","1.11.4-0ubuntu0.14.04.1","1.12.5-0ubuntu0.14.04.1","1.12.6-0ubuntu0.14.04.1","1.12.7-0ubuntu0.14.04.1","1.13.6-0ubuntu0.14.04.1","1.14.7-0ubuntu0.14.04.1","1.14.9-0ubuntu0.14.04.1","1.15.7-0ubuntu0.14.04.1","1.15.8-0ubuntu0.14.04.1","1.16.5-0ubuntu0.14.04.1","1.17.7-0ubuntu0.14.04.1","1.17.9-0ubuntu0.14.04.1","1.18.3-0ubuntu0.14.04.1","1.18.5-0ubuntu0.14.04.1","1.19.4-0ubuntu0.14.04.1","1.20.4-0ubuntu0.14.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"oxide-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-0ubuntu0.16.04.1"}]}],"versions":["1.9.5-0ubuntu1","1.10.3-0ubuntu0.15.10.1","1.10.3-0ubuntu0.15.10.2","1.11.3-0ubuntu3","1.11.4-0ubuntu1","1.11.5-0ubuntu1","1.12.5-0ubuntu1","1.12.6-0ubuntu1","1.12.7-0ubuntu1","1.13.6-0ubuntu1","1.14.7-0ubuntu1","1.14.9-0ubuntu0.16.04.1","1.15.7-0ubuntu0.16.04.1","1.15.8-0ubuntu0.16.04.1","1.16.5-0ubuntu0.16.04.1","1.17.7-0ubuntu0.16.04.1","1.17.9-0ubuntu0.16.04.1","1.18.3-0ubuntu0.16.04.1","1.18.5-0ubuntu0.16.04.1","1.19.4-0ubuntu0.16.04.1","1.20.4-0ubuntu0.16.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2ubuntu0.1"}]}],"versions":["1.1.28-2","1.1.28-2build1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2.1ubuntu0.1"}]}],"versions":["1.1.28-2build2","1.1.28-2.1"],"bundled":6},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-3.2"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-1.1"}]}],"bundled":35},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ruby3.2-rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.9-1.7"}]}],"bundled":41},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1.5"}]}],"bundled":44},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-1.1"}]}],"bundled":44},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.9-1.4"}]}],"bundled":44}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"chrome"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"xmlsoft","product":"libxslt"}],"references":[{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html","tags":["x_refsource_CONFIRM","x_transferred","article","web","report"]},{"url":"https://git.gnome.org/browse/libxslt/commit/?id=08ab2774b870de1c7b5a48693df75e8154addae5","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1038157","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://crbug.com/676623","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2017/dsa-3810","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/96767","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0499.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5029","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pf6m-fxpq-fg8v","tags":["advisory"]},{"url":"https://github.com/sparklemotion/nokogiri/issues/1634","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2017-5029.yml","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-5029","tags":["web","report"]},{"url":"https://ubuntu.com/security/notices/USN-3271-1","tags":["web","advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-5029","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-5029","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-5029","tags":["advisory"]},{"url":"https://github.com/sparklemotion/nokogiri","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2017-0111.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20187","tags":["report"]},{"url":"https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2017/02/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_16.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0125.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20760","tags":["report"]},{"url":"https://www.ubuntu.com/usn/usn-3271-1/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0499","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431048","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0499.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5029","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5029","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5030","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5030","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5030","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5031","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5031","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5032","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5032","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5033","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5033","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5034","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5034","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5035","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5035","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5035","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5036","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5036","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5037","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5038","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5038","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5043","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5043","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5044","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5044","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5045","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5046","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5046","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171282-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1005591","tags":["report"]},{"url":"https://bugzilla.suse.com/1035905","tags":["report"]},{"url":"https://bugzilla.suse.com/934119","tags":["report"]},{"url":"https://bugzilla.suse.com/952474","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5029","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171313-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3236-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4738","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CGEJIAKNREDZSMA4I6FRAI6U2CLXZKIO/#CGEJIAKNREDZSMA4I6FRAI6U2CLXZKIO","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1028848","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5046","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2PWEOYPGN6NS2GPOOLH27ZPXQ7KSRFP4/#2PWEOYPGN6NS2GPOOLH27ZPXQ7KSRFP4","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29469","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U5YNW74OL2W7SH2XTAVN5TODNFIVFL3Y/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-5029","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","status":"published","published":"2017-04-24T23:00:00Z","modified":"2024-08-05T14:47:44.3Z","updated_at":"2026-11-02T14:33:12.942409Z"}],"euvd":[{"id":"EUVD-2018-0301","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","status":"published","published":"2017-04-24T23:00:00Z","modified":"2024-08-05T14:47:44Z","updated_at":"2026-11-03T02:39:16.959487Z"}],"ghsa":[{"id":"GHSA-pf6m-fxpq-fg8v","title":"Nokogiri implementation of libxslt lacks integer overflow checks","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Nokogiri prior to 1.7.2, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","status":"published","published":"2018-07-31T18:21:29Z","modified":"2023-07-03T23:57:15Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:36:55.91458Z"}],"nvd":[{"id":"CVE-2017-5029","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","status":"published","published":"2017-04-24T23:59:00.157Z","modified":"2026-06-17T01:19:46.61Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:03:46.08744Z"}],"osv":[{"id":"ALPINE-CVE-2017-5029","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","status":"published","published":"2017-04-24T23:59:00.157Z","modified":"2026-06-15T18:18:06.795039686Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-5029","title":"CVE-2017-5029 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:56.234659Z","modified":"2026-09-06T07:15:08.010060873Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-5029","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","status":"published","published":"2017-04-24T23:59:00.157Z","modified":"2026-04-16T06:18:01.878865514Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.029968Z"},{"id":"DEBIAN-CVE-2017-5029","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","status":"published","published":"2017-04-24T23:59:00.157Z","modified":"2026-09-01T20:03:47.969859824Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"GHSA-pf6m-fxpq-fg8v","title":"Nokogiri implementation of libxslt lacks integer overflow checks","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Nokogiri prior to 1.7.2, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","status":"published","published":"2018-07-31T18:21:29Z","modified":"2024-02-16T08:13:08.873821Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:46:52.891208Z"},{"id":"RHSA-2017:0499","title":"Red Hat Security Advisory: chromium-browser security update","status":"published","published":"2024-09-13T11:59:00Z","modified":"2026-06-29T10:15:36Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-5029","description":"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.","status":"published","published":"2017-03-10T00:00:00Z","modified":"2026-04-22T11:25:31.320522Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.388065Z"},{"id":"DLA-866-1","title":"libxslt - security update","status":"published","published":"2017-03-23T00:00:00Z","modified":"2026-03-09T02:09:58.667291Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"DSA-3810-1","title":"chromium-browser - security update","status":"published","published":"2017-03-15T00:00:00Z","modified":"2026-03-09T01:20:23.520641Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0111","title":"Updated chromium-browser-stable packages fix security vulnerability","description":"Chromium-browser 57.0.2987.133 fixes security issues:\n\nMultiple flaws were found in the way Chromium 55 processes various types\nof web content, where loading a web page containing malicious content\ncould cause Chromium to crash, execute arbitrary code, or disclose\nsensitive information. (CVE-2017-5006, CVE-2017-5007, CVE-2017-5008,\nCVE-2017-5009, CVE-2017-5010, CVE-2017-5011, CVE-2017-5012,\nCVE-2017-5013, CVE-2017-5014, CVE-2017-5015, CVE-2017-5016,\nCVE-2017-5017, CVE-2017-5018, CVE-2017-5019, CVE-2017-5020,\nCVE-2017-5021, CVE-2017-5022, CVE-2017-5023, CVE-2017-5024,\nCVE-2017-5025, CVE-2017-5026, CVE-2017-5027, CVE-2017-5029,\nCVE-2017-5030, CVE-2017-5031, CVE-2017-5032, CVE-2017-5033,\nCVE-2017-5034, CVE-2017-5035, CVE-2017-5036, CVE-2017-5037,\nCVE-2017-5038, CVE-2017-5039, CVE-2017-5040, CVE-2017-5041,\nCVE-2017-5042, CVE-2017-5043, CVE-2017-5044, CVE-2017-5045,\nCVE-2017-5046, CVE-2017-5052, CVE-2017-5053, CVE-2017-5054,\nCVE-2017-5055, CVE-2017-5056)\n","status":"published","published":"2017-04-21T07:24:22Z","modified":"2026-04-16T06:23:01.92980446Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2017-0125","title":"Updated libxslt packages fix security vulnerability","description":"Holger Fuhrmannek discovered an integer overflow in the\nxsltAddTextString() function in Libxslt. An attacker could use this to\ncraft a malicious document that, when opened, could cause a denial of\nservice (application crash) or possible execute arbitrary code\n(CVE-2017-5029).\n","status":"published","published":"2017-05-02T06:37:59Z","modified":"2026-04-16T06:26:11.623780504Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2017:0738-1","title":"Security update for Chromium","description":"Chromium was updated to 57.0.2987.98 to fix security issues and bugs.\n\nThe following vulnerabilities were fixed (bsc#1028848):\n\n- CVE-2017-5030: Memory corruption in V8\n- CVE-2017-5031: Use after free in ANGLE\n- CVE-2017-5032: Out of bounds write in PDFium\n- CVE-2017-5029: Integer overflow in libxslt\n- CVE-2017-5034: Use after free in PDFium\n- CVE-2017-5035: Incorrect security UI in Omnibox\n- CVE-2017-5036: Use after free in PDFium\n- CVE-2017-5037: Multiple out of bounds writes in ChunkDemuxer\n- CVE-2017-5039: Use after free in PDFium\n- CVE-2017-5040: Information disclosure in V8\n- CVE-2017-5041: Address spoofing in Omnibox\n- CVE-2017-5033: Bypass of Content Security Policy in Blink\n- CVE-2017-5042: Incorrect handling of cookies in Cast\n- CVE-2017-5038: Use after free in GuestView\n- CVE-2017-5043: Use after free in GuestView\n- CVE-2017-5044: Heap overflow in Skia\n- CVE-2017-5045: Information disclosure in XSS Auditor\n- CVE-2017-5046: Information disclosure in Blink\n\n   \nThe following non-security changes are included:\n\n- Address broken rendering on non-intel cards   \n","status":"published","published":"2017-03-17T20:07:47Z","modified":"2026-02-04T02:19:55.549705Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2017:0740-1","title":"Security update for Chromium","description":"Chromium was updated to 57.0.2987.98 to fix security issues and bugs.\n\nThe following vulnerabilities were fixed (bsc#1028848):\n\n- CVE-2017-5030: Memory corruption in V8\n- CVE-2017-5031: Use after free in ANGLE\n- CVE-2017-5032: Out of bounds write in PDFium\n- CVE-2017-5029: Integer overflow in libxslt\n- CVE-2017-5034: Use after free in PDFium\n- CVE-2017-5035: Incorrect security UI in Omnibox\n- CVE-2017-5036: Use after free in PDFium\n- CVE-2017-5037: Multiple out of bounds writes in ChunkDemuxer\n- CVE-2017-5039: Use after free in PDFium\n- CVE-2017-5040: Information disclosure in V8\n- CVE-2017-5041: Address spoofing in Omnibox\n- CVE-2017-5033: Bypass of Content Security Policy in Blink\n- CVE-2017-5042: Incorrect handling of cookies in Cast\n- CVE-2017-5038: Use after free in GuestView\n- CVE-2017-5043: Use after free in GuestView\n- CVE-2017-5044: Heap overflow in Skia\n- CVE-2017-5045: Information disclosure in XSS Auditor\n- CVE-2017-5046: Information disclosure in Blink\n\n   \nThe following non-security changes are included:\n\n- Address broken rendering on non-intel cards   \n","status":"published","published":"2017-03-17T20:07:47Z","modified":"2026-02-04T03:04:02.820878Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11017-1","title":"libxslt-devel-1.1.34-3.2 on GA media","description":"These are all security issues fixed in the libxslt-devel-1.1.34-3.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:05:26.029331Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11340-1","title":"ruby2.7-rubygem-nokogiri-1.12.3-1.2 on GA media","description":"These are all security issues fixed in the ruby2.7-rubygem-nokogiri-1.12.3-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:48:20.265892Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11912-1","title":"ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media","description":"These are all security issues fixed in the ruby3.1-rubygem-nokogiri-1.13.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:50:48.204593Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:13165-1","title":"ruby3.2-rubygem-nokogiri-1.13.9-1.7 on GA media","description":"These are all security issues fixed in the ruby3.2-rubygem-nokogiri-1.13.9-1.7 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:20:35.126789Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:14174-1","title":"ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media","description":"These are all security issues fixed in the ruby3.3-rubygem-nokogiri-1.15.5-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-12T00:00:00Z","modified":"2026-02-04T03:03:19.688417Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2025:14697-1","title":"ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media","description":"These are all security issues fixed in the ruby3.4-rubygem-nokogiri-1.18.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-25T00:00:00Z","modified":"2026-02-04T03:50:12.082525Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2026:10356-1","title":"ruby4.0-rubygem-nokogiri-1.18.9-1.4 on GA media","description":"These are all security issues fixed in the ruby4.0-rubygem-nokogiri-1.18.9-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-13T00:00:00Z","modified":"2026-03-14T08:44:10.568806Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"SUSE-SU-2017:1282-1","title":"Security update for libxslt","description":"\n This update for libxslt fixes the following issues:\n \n- CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check \nfor integer overflow during a size calculation, which allowed a remote attacker \nto perform an out of bounds memory write via a crafted HTML page (bsc#1035905).\n\n- CVE-2016-4738: Fix heap overread in xsltFormatNumberConversion: An empty decimal-separator \ncould cause a heap overread. This can be exploited to leak a couple of bytes after \nthe buffer that holds the pattern string (bsc#1005591).\n\n- CVE-2015-9019: Properly initialize random generator (bsc#934119).\n\n- CVE-2015-7995: Vulnerability in function xsltStylePreCompute' in preproc.c could cause a \ntype confusion leading to DoS. (bsc#952474)\n\n ","status":"published","published":"2017-05-15T14:44:26Z","modified":"2026-02-04T04:34:58.180943Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1313-1","title":"Security update for libxslt","description":"\n This update for libxslt fixes the following issues:\n \n\n- CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check \nfor integer overflow during a size calculation, which allowed a remote attacker \nto perform an out of bounds memory write via a crafted HTML page (bsc#1035905).\n\n- CVE-2016-4738: Fix heap overread in xsltFormatNumberConversion: An empty decimal-separator \ncould cause a heap overread. This can be exploited to leak a couple of bytes after \nthe buffer that holds the pattern string (bsc#1005591).\n\n- CVE-2015-9019: Properly initialize random generator (bsc#934119).\n\n- CVE-2015-7995: Vulnerability in function xsltStylePreCompute' in preproc.c could cause a \ntype confusion leading to DoS. (bsc#952474)\n\n ","status":"published","published":"2017-05-16T13:41:07Z","modified":"2026-02-04T03:20:17.280197Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3236-1","title":"oxide-qt vulnerabilities","description":"Multiple vulnerabilities were discovered in Chromium. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to obtain sensitive information, spoof\napplication UI by causing the security status API or webview URL to\nindicate the wrong values, bypass security restrictions, cause a denial\nof service via application crash, or execute arbitrary code.\n(CVE-2017-5029, CVE-2017-5030, CVE-2017-5031, CVE-2017-5033,\nCVE-2017-5035, CVE-2017-5037, CVE-2017-5040, CVE-2017-5041, CVE-2017-5044,\nCVE-2017-5045, CVE-2017-5046)\n","status":"published","published":"2017-03-29T20:24:43Z","modified":"2026-04-22T09:33:48.916014Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3271-1","title":"libxslt vulnerabilities","description":"Holger Fuhrmannek discovered an integer overflow in the\nxsltAddTextString() function in Libxslt. An attacker could use\nthis to craft a malicious document that, when opened, could cause a\ndenial of service (application crash) or possible execute arbitrary\ncode. (CVE-2017-5029)\n\nNicolas Gregoire discovered that Libxslt mishandled namespace\nnodes. An attacker could use this to craft a malicious document that,\nwhen opened, could cause a denial of service (application crash)\nor possibly execute arbtrary code. This issue only affected Ubuntu\n16.04 LTS, Ubuntu 14.04 LTS, and Ubuntu 12.04 LTS. (CVE-2016-1683)\n\nSebastian Apelt discovered that a use-after-error existed in the\nxsltDocumentFunctionLoadDocument() function in Libxslt. An attacker\ncould use this to craft a malicious document that, when opened,\ncould cause a denial of service (application crash) or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS,\nUbuntu 14.04 LTS, and Ubuntu 12.04 LTS. (CVE-2016-1841)\n\nIt was discovered that a type confusion error existed in the\nxsltStylePreCompute() function in Libxslt. An attacker could use this\nto craft a malicious XML file that, when opened, caused a denial of\nservice (application crash). This issue only affected Ubuntu 14.04\nLTS and Ubuntu 12.04 LTS. (CVE-2015-7995)\n\nNicolas Gregoire discovered the Libxslt mishandled the 'i' and 'a'\nformat tokens for xsl:number data. An attacker could use this to\ncraft a malicious document that, when opened, could cause a denial of\nservice (application crash). This issue only affected Ubuntu 16.04 LTS,\nUbuntu 14.04 LTS, and Ubuntu 12.04 LTS. (CVE-2016-1684)\n\nIt was discovered that the xsltFormatNumberConversion() function\nin Libxslt did not properly handle empty decimal separators. An\nattacker could use this to craft a malicious document that, when\nopened, could cause a denial of service (application crash). This\nissue only affected Ubuntu 16.10, Ubuntu 16.04 LTS, Ubuntu 14.04 LTS,\nand Ubuntu 12.04 LTS. (CVE-2016-4738)\n","status":"published","published":"2017-04-28T04:47:36Z","modified":"2026-04-22T09:34:28.897168Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}