The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "58.0.3029.81-0ubuntu0.14.04.1172", "binary_name": "chromium-browser" }, { "binary_version": "58.0.3029.81-0ubuntu0.14.04.1172", "binary_name": "chromium-browser-dbgsym" }, { "binary_version": "58.0.3029.81-0ubuntu0.14.04.1172", "binary_name": "chromium-browser-l10n" }, { "binary_version": "58.0.3029.81-0ubuntu0.14.04.1172", "binary_name": "chromium-chromedriver" }, { "binary_version": "58.0.3029.81-0ubuntu0.14.04.1172", "binary_name": "chromium-chromedriver-dbgsym" }, { "binary_version": "58.0.3029.81-0ubuntu0.14.04.1172", "binary_name": "chromium-codecs-ffmpeg" }, { "binary_version": "58.0.3029.81-0ubuntu0.14.04.1172", "binary_name": "chromium-codecs-ffmpeg-dbgsym" }, { "binary_version": "58.0.3029.81-0ubuntu0.14.04.1172", "binary_name": "chromium-codecs-ffmpeg-extra" }, { "binary_version": "58.0.3029.81-0ubuntu0.14.04.1172", "binary_name": "chromium-codecs-ffmpeg-extra-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "libxslt1-dbg" }, { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "libxslt1-dev" }, { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "libxslt1-dev-dbgsym" }, { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "libxslt1.1" }, { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "libxslt1.1-dbgsym" }, { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "python-libxslt1" }, { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "python-libxslt1-dbg" }, { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "python-libxslt1-dbgsym" }, { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "xsltproc" }, { "binary_version": "1.1.28-2ubuntu0.1", "binary_name": "xsltproc-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "liboxideqt-qmlplugin" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "liboxideqtcore-dev" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "liboxideqtcore0" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "liboxideqtcore0-dbgsym" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "liboxideqtquick-dev" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "liboxideqtquick0" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "oxideqmlscene" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "oxideqt-chromedriver" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "oxideqt-codecs" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "oxideqt-codecs-dbg" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "oxideqt-codecs-dbgsym" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "oxideqt-codecs-extra" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "oxideqt-codecs-extra-dbg" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "oxideqt-codecs-extra-dbgsym" }, { "binary_version": "1.21.5-0ubuntu0.14.04.1", "binary_name": "oxideqt-dbg" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "57.0.2987.98-0ubuntu0.16.04.1276", "binary_name": "chromium-browser" }, { "binary_version": "57.0.2987.98-0ubuntu0.16.04.1276", "binary_name": "chromium-browser-dbgsym" }, { "binary_version": "57.0.2987.98-0ubuntu0.16.04.1276", "binary_name": "chromium-browser-l10n" }, { "binary_version": "57.0.2987.98-0ubuntu0.16.04.1276", "binary_name": "chromium-chromedriver" }, { "binary_version": "57.0.2987.98-0ubuntu0.16.04.1276", "binary_name": "chromium-chromedriver-dbgsym" }, { "binary_version": "57.0.2987.98-0ubuntu0.16.04.1276", "binary_name": "chromium-codecs-ffmpeg" }, { "binary_version": "57.0.2987.98-0ubuntu0.16.04.1276", "binary_name": "chromium-codecs-ffmpeg-dbgsym" }, { "binary_version": "57.0.2987.98-0ubuntu0.16.04.1276", "binary_name": "chromium-codecs-ffmpeg-extra" }, { "binary_version": "57.0.2987.98-0ubuntu0.16.04.1276", "binary_name": "chromium-codecs-ffmpeg-extra-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.1.28-2.1ubuntu0.1", "binary_name": "libxslt1-dbg" }, { "binary_version": "1.1.28-2.1ubuntu0.1", "binary_name": "libxslt1-dev" }, { "binary_version": "1.1.28-2.1ubuntu0.1", "binary_name": "libxslt1-dev-dbgsym" }, { "binary_version": "1.1.28-2.1ubuntu0.1", "binary_name": "libxslt1.1" }, { "binary_version": "1.1.28-2.1ubuntu0.1", "binary_name": "libxslt1.1-dbgsym" }, { "binary_version": "1.1.28-2.1ubuntu0.1", "binary_name": "python-libxslt1" }, { "binary_version": "1.1.28-2.1ubuntu0.1", "binary_name": "python-libxslt1-dbg" }, { "binary_version": "1.1.28-2.1ubuntu0.1", "binary_name": "xsltproc" }, { "binary_version": "1.1.28-2.1ubuntu0.1", "binary_name": "xsltproc-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "liboxideqt-qmlplugin" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "liboxideqtcore-dev" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "liboxideqtcore0" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "liboxideqtcore0-dbgsym" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "liboxideqtquick-dev" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "liboxideqtquick0" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "oxideqt-codecs" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "oxideqt-codecs-dbgsym" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "oxideqt-codecs-extra" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "oxideqt-codecs-extra-dbgsym" }, { "binary_version": "1.21.5-0ubuntu0.16.04.1", "binary_name": "oxideqt-doc" } ] }