CVE-2012-6139 Null dereference in n/a

What is CVE-2012-6139?

CVE-2012-6139 is a medium-severity vulnerability in Opensuse Opensuse, published on 12 Apr 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.

Which versions are affected by CVE-2012-6139?

It affects 2 products.

Products include Opensuse Opensuse, Xmlsoft Libxslt.

How do I fix CVE-2012-6139?

Upgrade to a fixed version.

Is CVE-2012-6139 being exploited?

There is no known exploitation of CVE-2012-6139 in the wild and no public exploit code.

Other vulnerabilities in Opensuse Opensuse

• CVE-2015-5957 Memory corruption in n/a Critical 10.0
• CVE-2015-0491 Memory corruption in n/a Critical 10.0
• CVE-2008-2388 Integer overflow in n/a Critical 10.0
• CVE-2010-1866 Integer overflow in n/a Critical 9.8
• CVE-2015-0492 Other in n/a Critical 9.3

All Opensuse Opensuse vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2012-6139, DSA-2654-1, GHSA-jg9f-36wv-mjmx.