UBUNTU-CVE-2025-7424

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-7424

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-7424.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-7424

Upstream

CVE-2025-7424

Published

2025-07-10T14:15:00Z

Modified

2025-10-10T15:24:52Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H CVSS Calculator
7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

References

Affected packages

Ubuntu:22.04:LTS

libxslt

Package

Name: libxslt
Purl: pkg:deb/ubuntu/libxslt@1.1.34-4ubuntu0.22.04.4?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.34-4

1.1.34-4build1

1.1.34-4build2

1.1.34-4ubuntu0.22.04.1

1.1.34-4ubuntu0.22.04.2

1.1.34-4ubuntu0.22.04.3

1.1.34-4ubuntu0.22.04.4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libxslt1-dev",
            "binary_version": "1.1.34-4ubuntu0.22.04.4"
        },
        {
            "binary_name": "libxslt1.1",
            "binary_version": "1.1.34-4ubuntu0.22.04.4"
        },
        {
            "binary_name": "xsltproc",
            "binary_version": "1.1.34-4ubuntu0.22.04.4"
        }
    ]
}

Ubuntu:24.04:LTS

libxslt

Package

Name: libxslt
Purl: pkg:deb/ubuntu/libxslt@1.1.39-0exp1ubuntu0.24.04.2?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.35-1

1.1.39-0exp1

1.1.39-0exp1build1

1.1.39-0exp1ubuntu0.24.04.1

1.1.39-0exp1ubuntu0.24.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libxslt1-dev",
            "binary_version": "1.1.39-0exp1ubuntu0.24.04.2"
        },
        {
            "binary_name": "libxslt1.1",
            "binary_version": "1.1.39-0exp1ubuntu0.24.04.2"
        },
        {
            "binary_name": "xsltproc",
            "binary_version": "1.1.39-0exp1ubuntu0.24.04.2"
        }
    ]
}

Ubuntu:25.04

libxslt

Package

Name: libxslt
Purl: pkg:deb/ubuntu/libxslt@1.1.39-0exp1ubuntu4?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.39-0exp1ubuntu1

1.1.39-0exp1ubuntu2

1.1.39-0exp1ubuntu3

1.1.39-0exp1ubuntu4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libxslt1-dev",
            "binary_version": "1.1.39-0exp1ubuntu4"
        },
        {
            "binary_name": "libxslt1.1",
            "binary_version": "1.1.39-0exp1ubuntu4"
        },
        {
            "binary_name": "xsltproc",
            "binary_version": "1.1.39-0exp1ubuntu4"
        }
    ]
}

Ubuntu:25.10

libxslt

Package

Name: libxslt
Purl: pkg:deb/ubuntu/libxslt@1.1.43-0.1?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.39-0exp1ubuntu4

1.1.43-0exp1

1.1.43-0.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libxslt1-dev",
            "binary_version": "1.1.43-0.1"
        },
        {
            "binary_name": "libxslt1.1",
            "binary_version": "1.1.43-0.1"
        },
        {
            "binary_name": "xsltproc",
            "binary_version": "1.1.43-0.1"
        }
    ]
}

Ubuntu:Pro:14.04:LTS

libxslt

Package

Name: libxslt
Purl: pkg:deb/ubuntu/libxslt@1.1.28-2ubuntu0.2+esm4?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.28-2

1.1.28-2build1

1.1.28-2ubuntu0.1

1.1.28-2ubuntu0.2

1.1.28-2ubuntu0.2+esm1

1.1.28-2ubuntu0.2+esm2

1.1.28-2ubuntu0.2+esm3

1.1.28-2ubuntu0.2+esm4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libxslt1-dev",
            "binary_version": "1.1.28-2ubuntu0.2+esm4"
        },
        {
            "binary_name": "libxslt1.1",
            "binary_version": "1.1.28-2ubuntu0.2+esm4"
        },
        {
            "binary_name": "python-libxslt1",
            "binary_version": "1.1.28-2ubuntu0.2+esm4"
        },
        {
            "binary_name": "xsltproc",
            "binary_version": "1.1.28-2ubuntu0.2+esm4"
        }
    ]
}

Ubuntu:Pro:16.04:LTS

libxslt

Package

Name: libxslt
Purl: pkg:deb/ubuntu/libxslt@1.1.28-2.1ubuntu0.3+esm3?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.28-2build2

1.1.28-2.1

1.1.28-2.1ubuntu0.1

1.1.28-2.1ubuntu0.2

1.1.28-2.1ubuntu0.3

1.1.28-2.1ubuntu0.3+esm1

1.1.28-2.1ubuntu0.3+esm2

1.1.28-2.1ubuntu0.3+esm3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libxslt1-dev",
            "binary_version": "1.1.28-2.1ubuntu0.3+esm3"
        },
        {
            "binary_name": "libxslt1.1",
            "binary_version": "1.1.28-2.1ubuntu0.3+esm3"
        },
        {
            "binary_name": "python-libxslt1",
            "binary_version": "1.1.28-2.1ubuntu0.3+esm3"
        },
        {
            "binary_name": "xsltproc",
            "binary_version": "1.1.28-2.1ubuntu0.3+esm3"
        }
    ]
}

Ubuntu:Pro:18.04:LTS

libxslt

Package

Name: libxslt
Purl: pkg:deb/ubuntu/libxslt@1.1.29-5ubuntu0.3+esm2?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.29-2.1ubuntu1

1.1.29-4

1.1.29-5

1.1.29-5ubuntu0.1

1.1.29-5ubuntu0.2

1.1.29-5ubuntu0.3

1.1.29-5ubuntu0.3+esm1

1.1.29-5ubuntu0.3+esm2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libxslt1-dev",
            "binary_version": "1.1.29-5ubuntu0.3+esm2"
        },
        {
            "binary_name": "libxslt1.1",
            "binary_version": "1.1.29-5ubuntu0.3+esm2"
        },
        {
            "binary_name": "python-libxslt1",
            "binary_version": "1.1.29-5ubuntu0.3+esm2"
        },
        {
            "binary_name": "xsltproc",
            "binary_version": "1.1.29-5ubuntu0.3+esm2"
        }
    ]
}

Ubuntu:Pro:20.04:LTS

libxslt

Package

Name: libxslt
Purl: pkg:deb/ubuntu/libxslt@1.1.34-4ubuntu0.20.04.3+esm1?arch=source&distro=esm-infra/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.33-0ubuntu1

1.1.33-0ubuntu2

1.1.33-0ubuntu3

1.1.34-1

1.1.34-1ubuntu1

1.1.34-3

1.1.34-4

1.1.34-4ubuntu0.20.04.1

1.1.34-4ubuntu0.20.04.2

1.1.34-4ubuntu0.20.04.3

1.1.34-4ubuntu0.20.04.3+esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libxslt1-dev",
            "binary_version": "1.1.34-4ubuntu0.20.04.3+esm1"
        },
        {
            "binary_name": "libxslt1.1",
            "binary_version": "1.1.34-4ubuntu0.20.04.3+esm1"
        },
        {
            "binary_name": "xsltproc",
            "binary_version": "1.1.34-4ubuntu0.20.04.3+esm1"
        }
    ]
}