CVE-2019-5815: Heap buffer overflow in Blink
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 74.0.3729.108 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.73-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.73-1~deb13u1Fixed in 156.0.8078.47-1Fixed in 156.0.8078.79-1 - Upgrade
Upgrade
debian/libxsltto a version that resolves this vulnerability.Fixed in 1.1.35-1+deb12u4Fixed in 1.1.35-1+deb12u3Fixed in 1.1.35-1.2+deb13u3Fixed in 1.1.35-1.2+deb13u2Fixed in 1.1.45-0.1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-5815?
CVE-2019-5815 is a vulnerability that allows attackers to potentially exploit heap corruption via crafted XML data.
What is the severity of CVE-2019-5815?
CVE-2019-5815 has a severity level of 7.5 (high).
How does CVE-2019-5815 affect the affected software?
CVE-2019-5815 affects the software mentioned in the 'affected_software' field, specifically 'libxslt' and 'chromium' on certain debian/linux versions.
How can CVE-2019-5815 be fixed?
To fix CVE-2019-5815, users should update to the recommended versions mentioned in the 'affected_software' field or apply the provided patches from the official sources.
Where can I find more information about CVE-2019-5815?
More information about CVE-2019-5815 can be found in the references provided: [link1], [link2], [link3].