FLAT-VWP58 – Vulnerability | Fluid Attacks Database

Database

Description

arbitrary code execution

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	libxslt	>=0 <1.1.29-2.1	1.1.29-2.1
alpine v3.19	libxslt	=1.1.24-r0 \|\| =1.1.24-r1 \|\| =1.1.26-r0 \|\| =1.1.26-r1 \|\| =1.1.26-r2 \|\| =1.1.26-r3 \|\| =1.1.26-r4 \|\| =1.1.26-r5 \|\| =1.1.26-r6 \|\| =1.1.26-r7 \|\| =1.1.26-r8 \|\| =1.1.26-r9 \|\| =1.1.27-r0 \|\| =1.1.27-r1 \|\| =1.1.28-r0 \|\| =1.1.28-r1 \|\| =1.1.28-r2 \|\| =1.1.29-r0 \|\| >=0 <1.1.29-r1	1.1.29-r1
alpine v3.17	libxslt	=1.1.24-r0 \|\| =1.1.24-r1 \|\| =1.1.26-r0 \|\| =1.1.26-r1 \|\| =1.1.26-r2 \|\| =1.1.26-r3 \|\| =1.1.26-r4 \|\| =1.1.26-r5 \|\| =1.1.26-r6 \|\| =1.1.26-r7 \|\| =1.1.26-r8 \|\| =1.1.26-r9 \|\| =1.1.27-r0 \|\| =1.1.27-r1 \|\| =1.1.28-r0 \|\| =1.1.28-r1 \|\| =1.1.28-r2 \|\| =1.1.29-r0 \|\| >=0 <1.1.29-r1	1.1.29-r1
alpine v3.6	libxslt	=1.1.24-r0 \|\| =1.1.24-r1 \|\| =1.1.26-r0 \|\| =1.1.26-r1 \|\| =1.1.26-r2 \|\| =1.1.26-r3 \|\| =1.1.26-r4 \|\| =1.1.26-r5 \|\| =1.1.26-r6 \|\| =1.1.26-r7 \|\| =1.1.26-r8 \|\| =1.1.26-r9 \|\| =1.1.27-r0 \|\| =1.1.27-r1 \|\| =1.1.28-r0 \|\| =1.1.28-r1 \|\| =1.1.28-r2 \|\| =1.1.29-r0 \|\| >=0 <1.1.29-r1	1.1.29-r1
alpine v3.8	libxslt	=1.1.24-r0 \|\| =1.1.24-r1 \|\| =1.1.26-r0 \|\| =1.1.26-r1 \|\| =1.1.26-r2 \|\| =1.1.26-r3 \|\| =1.1.26-r4 \|\| =1.1.26-r5 \|\| =1.1.26-r6 \|\| =1.1.26-r7 \|\| =1.1.26-r8 \|\| =1.1.26-r9 \|\| =1.1.27-r0 \|\| =1.1.27-r1 \|\| =1.1.28-r0 \|\| =1.1.28-r1 \|\| =1.1.28-r2 \|\| =1.1.29-r0 \|\| >=0 <1.1.29-r1	1.1.29-r1
alpine v3.13	libxslt	=1.1.24-r0 \|\| =1.1.24-r1 \|\| =1.1.26-r0 \|\| =1.1.26-r1 \|\| =1.1.26-r2 \|\| =1.1.26-r3 \|\| =1.1.26-r4 \|\| =1.1.26-r5 \|\| =1.1.26-r6 \|\| =1.1.26-r7 \|\| =1.1.26-r8 \|\| =1.1.26-r9 \|\| =1.1.27-r0 \|\| =1.1.27-r1 \|\| =1.1.28-r0 \|\| =1.1.28-r1 \|\| =1.1.28-r2 \|\| =1.1.29-r0 \|\| >=0 <1.1.29-r1	1.1.29-r1
alpine v3.14	libxslt	=1.1.24-r0 \|\| =1.1.24-r1 \|\| =1.1.26-r0 \|\| =1.1.26-r1 \|\| =1.1.26-r2 \|\| =1.1.26-r3 \|\| =1.1.26-r4 \|\| =1.1.26-r5 \|\| =1.1.26-r6 \|\| =1.1.26-r7 \|\| =1.1.26-r8 \|\| =1.1.26-r9 \|\| =1.1.27-r0 \|\| =1.1.27-r1 \|\| =1.1.28-r0 \|\| =1.1.28-r1 \|\| =1.1.28-r2 \|\| =1.1.29-r0 \|\| >=0 <1.1.29-r1	1.1.29-r1
alpine v3.5	libxslt	=1.1.24-r0 \|\| =1.1.24-r1 \|\| =1.1.26-r0 \|\| =1.1.26-r1 \|\| =1.1.26-r2 \|\| =1.1.26-r3 \|\| =1.1.26-r4 \|\| =1.1.26-r5 \|\| =1.1.26-r6 \|\| =1.1.26-r7 \|\| =1.1.26-r8 \|\| =1.1.26-r9 \|\| =1.1.27-r0 \|\| =1.1.27-r1 \|\| =1.1.28-r0 \|\| =1.1.28-r1 \|\| =1.1.28-r2 \|\| =1.1.29-r0 \|\| >=0 <1.1.29-r1	1.1.29-r1
alpine v3.11	libxslt	=1.1.24-r0 \|\| =1.1.24-r1 \|\| =1.1.26-r0 \|\| =1.1.26-r1 \|\| =1.1.26-r2 \|\| =1.1.26-r3 \|\| =1.1.26-r4 \|\| =1.1.26-r5 \|\| =1.1.26-r6 \|\| =1.1.26-r7 \|\| =1.1.26-r8 \|\| =1.1.26-r9 \|\| =1.1.27-r0 \|\| =1.1.27-r1 \|\| =1.1.28-r0 \|\| =1.1.28-r1 \|\| =1.1.28-r2 \|\| =1.1.29-r0 \|\| >=0 <1.1.29-r1	1.1.29-r1
alpine v3.18	libxslt	=1.1.24-r0 \|\| =1.1.24-r1 \|\| =1.1.26-r0 \|\| =1.1.26-r1 \|\| =1.1.26-r2 \|\| =1.1.26-r3 \|\| =1.1.26-r4 \|\| =1.1.26-r5 \|\| =1.1.26-r6 \|\| =1.1.26-r7 \|\| =1.1.26-r8 \|\| =1.1.26-r9 \|\| =1.1.27-r0 \|\| =1.1.27-r1 \|\| =1.1.28-r0 \|\| =1.1.28-r1 \|\| =1.1.28-r2 \|\| =1.1.29-r0 \|\| >=0 <1.1.29-r1	1.1.29-r1

1-10 of 30

10

Aliases

1. CVE-2017-50292. NVD-2017-50293. OSV-DEBIAN-2017-50294. OSV-2017-50295. OSV-ALPINE-2017-50296. GHSA-pf6m-fxpq-fg8v7. GCVE-2017-50298. SECURITY-TRACKER-CVE-2017-50299. SECURITY-CVE-2017-502910. UBUNTU-CVE-2017-502911. ubuntu.com

References

1. https://github.com/sparklemotion/nokogiri/issues/16342. https://git.gnome.org/browse/libxslt/commit/?id=08ab2774b870de1c7b5a48693df75e8154addae53. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2017-5029.yml