Read the docs
TI-2012-05100 Aliases CVE-2012-6139GHSA-jg9f-36wv-mjmx

libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer…

Priority LOW 30Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
Will not fix Red Hat: no fix planned

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.

Why it matters now

EPSS 0.04286 91st percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 81

CPEVersionsRoleVendor
cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:*up to 1.1.27Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.0.1:*:*:*:*:*:*:*0.0.1Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.1.0:*:*:*:*:*:*:*0.1.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.2.0:*:*:*:*:*:*:*0.2.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.3.0:*:*:*:*:*:*:*0.3.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.4.0:*:*:*:*:*:*:*0.4.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.5.0:*:*:*:*:*:*:*0.5.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.6.0:*:*:*:*:*:*:*0.6.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.7.0:*:*:*:*:*:*:*0.7.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.8.0:*:*:*:*:*:*:*0.8.0Vulnerablexmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:* Versions up to 1.1.27 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.0.1:*:*:*:*:*:*:* Versions 0.0.1 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.1.0:*:*:*:*:*:*:* Versions 0.1.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.2.0:*:*:*:*:*:*:* Versions 0.2.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.3.0:*:*:*:*:*:*:* Versions 0.3.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.4.0:*:*:*:*:*:*:* Versions 0.4.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.5.0:*:*:*:*:*:*:* Versions 0.5.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.6.0:*:*:*:*:*:*:* Versions 0.6.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.7.0:*:*:*:*:*:*:* Versions 0.7.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.8.0:*:*:*:*:*:*:* Versions 0.8.0 Vulnerable ·xmlsoft
Show 71 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:xmlsoft:libxslt:0.9.0:*:*:*:*:*:*:*0.9.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.10.0:*:*:*:*:*:*:*0.10.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.11.0:*:*:*:*:*:*:*0.11.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.12.0:*:*:*:*:*:*:*0.12.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.13.0:*:*:*:*:*:*:*0.13.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:0.14.0:*:*:*:*:*:*:*0.14.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.0:*:*:*:*:*:*:*1.0.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.1:*:*:*:*:*:*:*1.0.1Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.2:*:*:*:*:*:*:*1.0.2Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.3:*:*:*:*:*:*:*1.0.3Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.4:*:*:*:*:*:*:*1.0.4Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.5:*:*:*:*:*:*:*1.0.5Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.6:*:*:*:*:*:*:*1.0.6Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.7:*:*:*:*:*:*:*1.0.7Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.8:*:*:*:*:*:*:*1.0.8Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.9:*:*:*:*:*:*:*1.0.9Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.10:*:*:*:*:*:*:*1.0.10Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.11:*:*:*:*:*:*:*1.0.11Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.12:*:*:*:*:*:*:*1.0.12Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.13:*:*:*:*:*:*:*1.0.13Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.14:*:*:*:*:*:*:*1.0.14Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.15:*:*:*:*:*:*:*1.0.15Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.16:*:*:*:*:*:*:*1.0.16Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.17:*:*:*:*:*:*:*1.0.17Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.18:*:*:*:*:*:*:*1.0.18Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.19:*:*:*:*:*:*:*1.0.19Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.20:*:*:*:*:*:*:*1.0.20Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.21:*:*:*:*:*:*:*1.0.21Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.22:*:*:*:*:*:*:*1.0.22Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.23:*:*:*:*:*:*:*1.0.23Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.24:*:*:*:*:*:*:*1.0.24Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.25:*:*:*:*:*:*:*1.0.25Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.26:*:*:*:*:*:*:*1.0.26Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.27:*:*:*:*:*:*:*1.0.27Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.28:*:*:*:*:*:*:*1.0.28Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.29:*:*:*:*:*:*:*1.0.29Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.30:*:*:*:*:*:*:*1.0.30Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.31:*:*:*:*:*:*:*1.0.31Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.32:*:*:*:*:*:*:*1.0.32Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.0.33:*:*:*:*:*:*:*1.0.33Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.0:*:*:*:*:*:*:*1.1.0Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.1:*:*:*:*:*:*:*1.1.1Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.2:*:*:*:*:*:*:*1.1.2Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.3:*:*:*:*:*:*:*1.1.3Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.4:*:*:*:*:*:*:*1.1.4Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.5:*:*:*:*:*:*:*1.1.5Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.6:*:*:*:*:*:*:*1.1.6Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.7:*:*:*:*:*:*:*1.1.7Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.8:*:*:*:*:*:*:*1.1.8Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.9:*:*:*:*:*:*:*1.1.9Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.10:*:*:*:*:*:*:*1.1.10Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.11:*:*:*:*:*:*:*1.1.11Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.12:*:*:*:*:*:*:*1.1.12Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.13:*:*:*:*:*:*:*1.1.13Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.14:*:*:*:*:*:*:*1.1.14Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.15:*:*:*:*:*:*:*1.1.15Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.16:*:*:*:*:*:*:*1.1.16Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.17:*:*:*:*:*:*:*1.1.17Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.18:*:*:*:*:*:*:*1.1.18Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.19:*:*:*:*:*:*:*1.1.19Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.20:*:*:*:*:*:*:*1.1.20Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.21:*:*:*:*:*:*:*1.1.21Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.22:*:*:*:*:*:*:*1.1.22Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.23:*:*:*:*:*:*:*1.1.23Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.24:*:*:*:*:*:*:*1.1.24Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.25:*:*:*:*:*:*:*1.1.25Vulnerablexmlsoft
cpe:2.3:a:xmlsoft:libxslt:1.1.26:*:*:*:*:*:*:*1.1.26Vulnerablexmlsoft
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*11.4VulnerableopenSUSE
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*12.1VulnerableopenSUSE
cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*12.2VulnerableopenSUSE
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*12.3VulnerableopenSUSE
  • cpe:2.3:a:xmlsoft:libxslt:0.9.0:*:*:*:*:*:*:* Versions 0.9.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.10.0:*:*:*:*:*:*:* Versions 0.10.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.11.0:*:*:*:*:*:*:* Versions 0.11.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.12.0:*:*:*:*:*:*:* Versions 0.12.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.13.0:*:*:*:*:*:*:* Versions 0.13.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:0.14.0:*:*:*:*:*:*:* Versions 0.14.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.13:*:*:*:*:*:*:* Versions 1.0.13 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.17:*:*:*:*:*:*:* Versions 1.0.17 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.19:*:*:*:*:*:*:* Versions 1.0.19 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.20:*:*:*:*:*:*:* Versions 1.0.20 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.21:*:*:*:*:*:*:* Versions 1.0.21 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.22:*:*:*:*:*:*:* Versions 1.0.22 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.23:*:*:*:*:*:*:* Versions 1.0.23 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.24:*:*:*:*:*:*:* Versions 1.0.24 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.25:*:*:*:*:*:*:* Versions 1.0.25 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.26:*:*:*:*:*:*:* Versions 1.0.26 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.27:*:*:*:*:*:*:* Versions 1.0.27 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.28:*:*:*:*:*:*:* Versions 1.0.28 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.29:*:*:*:*:*:*:* Versions 1.0.29 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.30:*:*:*:*:*:*:* Versions 1.0.30 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.31:*:*:*:*:*:*:* Versions 1.0.31 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.32:*:*:*:*:*:*:* Versions 1.0.32 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.0.33:*:*:*:*:*:*:* Versions 1.0.33 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.5:*:*:*:*:*:*:* Versions 1.1.5 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.6:*:*:*:*:*:*:* Versions 1.1.6 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.7:*:*:*:*:*:*:* Versions 1.1.7 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.8:*:*:*:*:*:*:* Versions 1.1.8 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.9:*:*:*:*:*:*:* Versions 1.1.9 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.10:*:*:*:*:*:*:* Versions 1.1.10 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.11:*:*:*:*:*:*:* Versions 1.1.11 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.12:*:*:*:*:*:*:* Versions 1.1.12 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.13:*:*:*:*:*:*:* Versions 1.1.13 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.14:*:*:*:*:*:*:* Versions 1.1.14 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.15:*:*:*:*:*:*:* Versions 1.1.15 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.16:*:*:*:*:*:*:* Versions 1.1.16 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.17:*:*:*:*:*:*:* Versions 1.1.17 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.18:*:*:*:*:*:*:* Versions 1.1.18 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.19:*:*:*:*:*:*:* Versions 1.1.19 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.20:*:*:*:*:*:*:* Versions 1.1.20 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.21:*:*:*:*:*:*:* Versions 1.1.21 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.22:*:*:*:*:*:*:* Versions 1.1.22 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.23:*:*:*:*:*:*:* Versions 1.1.23 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.24:*:*:*:*:*:*:* Versions 1.1.24 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.25:*:*:*:*:*:*:* Versions 1.1.25 Vulnerable ·xmlsoft
  • cpe:2.3:a:xmlsoft:libxslt:1.1.26:*:*:*:*:*:*:* Versions 1.1.26 Vulnerable ·xmlsoft
  • cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* Versions 11.4 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:* Versions 12.1 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:* Versions 12.3 Vulnerable ·openSUSE

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-6139
  2. 2026-10-03 Alias added: GHSA-jg9f-36wv-mjmx

References

Exploit 2

Patch 2

Advisory 8

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences