CVE-2019-11068 Nokogiri vulnerable to libxslt protection mechanism bypass
Attackers can bypass security checks in libxslt by exploiting error handling flaws, allowing the loading of crafted URLs that should have been blocked.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-11068?
CVE-2019-11068 is a critical vulnerability in Canonical Ubuntu Linux, published on 10 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
Which versions are affected by CVE-2019-11068?
2 open source packages ship an affected version, including nokogiri. It affects 22 products.
| Package | Affected | Fixed in |
|---|---|---|
nokogiri RubyGems | All versions | 1.10.3 |
nokogiri RubyGems | All versions | 1.10.3 |
Linux distribution packages (14)
libxslt SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 1.1.28-17.3.1 |
libxslt SUSE:Linux Enterprise Desktop 12 SP4 | All versions | 1.1.28-17.3.1 |
libxslt SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 1.1.32-3.3.1 |
libxslt SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 1.1.32-3.3.1 |
libxslt SUSE:Linux Enterprise Server 12 SP3 | All versions | 1.1.28-17.3.1 |
libxslt SUSE:Linux Enterprise Server 12 SP4 | All versions | 1.1.28-17.3.1 |
libxslt SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 1.1.28-17.3.1 |
libxslt SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 1.1.28-17.3.1 |
libxslt SUSE:Linux Enterprise Software Development Kit 12 SP3 | All versions | 1.1.28-17.3.1 |
libxslt SUSE:Linux Enterprise Software Development Kit 12 SP4 | All versions | 1.1.28-17.3.1 |
libxslt openSUSE:Leap 15.0 | All versions | 1.1.32-lp150.2.3.1 |
libxslt-python openSUSE:Leap 15.0 | All versions | 1.1.32-lp150.2.3.1 |
libxslt openSUSE:Leap 15.1 | All versions | 1.1.32-lp151.3.3.1 |
libxslt-python openSUSE:Leap 15.1 | All versions | 1.1.32-lp151.3.3.1 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Netapp Active Iq Unified Manager, Netapp Cloud Backup, Netapp E-Series Santricity Management Plug-Ins and 16 more.
How do I fix CVE-2019-11068?
Upgrade nokogiri to 1.10.3 or later.
Is CVE-2019-11068 being exploited?
There is no known exploitation of CVE-2019-11068 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2019-11068, DEBIAN-CVE-2019-11068, DLA-1756-1, GHSA-qxcg-xjjg-66mj, JLSEC-2026-577, MGASA-2019-0175 and 7 more.