CVE-2013-4520
N/A
Published: December 14, 2013 at 08:00 PM UTC
Updated: June 16, 2026 at 11:57 PM UTC
1 product affected across 1 vendorLibxslt
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type. NOTE: this issue is due to an incomplete fix for CVE-2012-2825.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.1.240.0.10.1.00.10.00.11.00.12.00.13.00.14.00.2.00.3.00.4.00.5.00.6.00.7.00.8.00.9.01.0.01.0.11.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.21.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.291.0.31.0.301.0.311.0.321.0.331.0.41.0.51.0.61.0.71.0.81.0.91.1.01.1.11.1.101.1.111.1.121.1.131.1.141.1.151.1.161.1.171.1.181.1.191.1.21.1.201.1.211.1.221.1.231.1.31.1.41.1.51.1.61.1.71.1.81.1.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/56072x_refsource_CONFIRMExploitPatch
Source: [email protected]
https://bugzilla.novell.com/show_bug.cgi?id=849019x_refsource_MISCExploitPatch
Source: [email protected]
https://gitorious.org/libxslt/libxslt/commit/7089a62b8f133b42a2981cf1f920a8b3fe9a8caaVendor Advisoryx_refsource_SUSE
Source: [email protected]
https://www.suse.com/support/update/announcement/2013/suse-su-20131654-1.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
https://www.suse.com/support/update/announcement/2013/suse-su-20131656-1.htmlQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card