CVE-2008-1767
NoneCVSS
—
EPSS
12.8%
Published
May 23, 2008
CISA due date
—
The record
Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libxslt | 0 | 1.1.24-1 |
| Debian:12 | libxslt | 0 | 1.1.24-1 |
| Debian:13 | libxslt | 0 | 1.1.24-1 |
| Debian:4.0 | libxslt | 0 | 1.1.19-2 |
| Red Hat:enterprise_linux:2.1::as | libxslt | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::as | libxslt-devel | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::as | libxslt-python | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::aw | libxslt | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::aw | libxslt-devel | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::aw | libxslt-python | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::es | libxslt | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::es | libxslt-devel | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::es | libxslt-python | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::ws | libxslt | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::ws | libxslt-devel | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:2.1::ws | libxslt-python | 0 | 0:1.0.15-3 |
| Red Hat:enterprise_linux:3::as | libxslt | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::as | libxslt-debuginfo | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::as | libxslt-devel | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::desktop | libxslt | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::desktop | libxslt-debuginfo | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::desktop | libxslt-devel | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::es | libxslt | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::es | libxslt-debuginfo | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::es | libxslt-devel | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::ws | libxslt | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::ws | libxslt-debuginfo | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:3::ws | libxslt-devel | 0 | 0:1.0.33-6 |
| Red Hat:enterprise_linux:4::as | libxslt | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::as | libxslt-debuginfo | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::as | libxslt-devel | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::as | libxslt-python | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | libxslt | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | libxslt-debuginfo | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | libxslt-devel | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | libxslt-python | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::es | libxslt | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::es | libxslt-debuginfo | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::es | libxslt-devel | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::es | libxslt-python | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | libxslt | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | libxslt-debuginfo | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | libxslt-devel | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | libxslt-python | 0 | 0:1.1.11-1.el4_6.1 |
| Red Hat:enterprise_linux:5::client | libxslt | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::client | libxslt-debuginfo | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::client | libxslt-devel | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::client | libxslt-python | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | libxslt | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | libxslt-debuginfo | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | libxslt-devel | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | libxslt-python | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | libxslt | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | libxslt-debuginfo | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | libxslt-devel | 0 | 0:1.1.17-2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | libxslt-python | 0 | 0:1.1.17-2.el5_1.1 |
| openSUSE:Tumbleweed | libxslt | 0 | 1.1.34-3.2 |
Related vulnerabilities
- CVE-2019-13117 In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a… Also affects libxslt
- CVE-2019-11068 libxslt through 1.1.33 allows bypass of a protection mechanism because callers of… Also affects libxslt
- CVE-2017-5029 The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in… Also affects libxslt
- CVE-2015-7995 The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the… Also affects libxslt
- CVE-2008-2935 Multiple heap-based buffer overflows in the rc4 (1) encryption (aka… Also affects libxslt
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119