REDHAT-BUG-2352483: Use After Free
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2352483?
The severity of REDHAT-BUG-2352483 is classified as critical due to the use-after-free vulnerability in libxslt.
How do I fix REDHAT-BUG-2352483?
To fix REDHAT-BUG-2352483, update libxslt to version 1.1.43 or later.
Which versions of libxslt are affected by REDHAT-BUG-2352483?
Libxslt versions prior to 1.1.43 are affected by REDHAT-BUG-2352483.
What can be exploited in REDHAT-BUG-2352483?
REDHAT-BUG-2352483 can be exploited through nested XPath evaluations that modify the XPath context node.
What are the implications of not addressing REDHAT-BUG-2352483?
Failing to address REDHAT-BUG-2352483 may lead to potential memory corruption and security vulnerabilities in applications using libxslt.