Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-2935

CWE-119 — Buffer Overflow9 documents9 sources

Severity

7.5HIGH

EPSS

22.1%

top 4.21%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Xmlsoft Libxslt

Timeline

PublishedAug 1

Latest updateMay 1

Description

Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as "an argument in the XSL input."

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶Debianlibxslt< 1.1.24-2+3

▶NVDxmlsoft/libxslt17 versions+16

Patches

Patch: www.ocert.org ↗Patch: www.ocert.org ↗Patch: www.ocert.org ↗

🔴Vulnerability Details

GHSA

GHSA-4597-8mcf-pw36: Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFuncti↗2022-05-01

▶

CVEList

CVE-2008-2935: Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFuncti↗2008-08-01

▶

OSV

CVE-2008-2935: Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFuncti↗2008-08-01

▶

💥Exploits & PoCs

Exploit-DB

libxslt 1.1.x - RC4 Encryption and Decryption functions Buffer Overflow↗2008-07-31

▶

📋Vendor Advisories

Ubuntu

libxslt vulnerabilities↗2008-08-01

▶

Red Hat

libxslt: buffer overflow in libexslt RC4 encryption/decryption functions↗2008-07-31

▶

Debian

CVE-2008-2935: libxslt - Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoR...↗2008

▶

💬Community

Bugzilla

CVE-2008-2935 libxslt: buffer overflow in libexslt RC4 encryption/decryption functions↗2008-07-18

▶