CVE-2019-5815: Heap buffer overflow in Blink

Q: What is CVE-2019-5815?

CVE-2019-5815 is a vulnerability that allows attackers to potentially exploit heap corruption via crafted XML data.

Q: What is the severity of CVE-2019-5815?

CVE-2019-5815 has a severity level of 7.5 (high).

Q: How does CVE-2019-5815 affect the affected software?

CVE-2019-5815 affects the software mentioned in the 'affected_software' field, specifically 'libxslt' and 'chromium' on certain debian/linux versions.

Q: How can CVE-2019-5815 be fixed?

To fix CVE-2019-5815, users should update to the recommended versions mentioned in the 'affected_software' field or apply the provided patches from the official sources.

Q: Where can I find more information about CVE-2019-5815?

More information about CVE-2019-5815 can be found in the references provided: [link1], [link2], [link3].

Published Feb 11, 2019

Updated

Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.

Credit

Nicolas Grégoire, Agarri

Affected Software

5 affected componentsFixes available

debian/chromium

90.0.4430.212-1~deb10u1116.0.5845.180-1~deb11u1120.0.6099.129-1~deb11u1119.0.6045.199-1~deb12u1120.0.6099.129-1~deb12u1120.0.6099.129-1

debian/libxslt<=1.1.32-2.2~deb10u1

1.1.32-2.2~deb10u21.1.34-4+deb11u11.1.35-1

Google Chrome<74.0.3729.108

74.0.3729.108

Xmlsoft Libxslt<1.1.33

Debian Debian Linux=10.0

Remediation

Patch Available

https://gitlab.gnome.org/GNOME/libxslt/commit/08b62c25871b38d5d573515ca8a065b4b8f64f6b

Event History

Feb 11, 2019

CVE Published

12:00 AM

Dec 11, 2019

CVE Published

via MITRE·12:55 AM

Data Sourced

via MITRE·12:55 AM

Description

Parent advisories

This vulnerability appears in the following advisories.

286281954613599470

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2019-5815?