CVE-2008-1767 describes a buffer overflow vulnerability in libxslt versions prior to 1.1.24, specifically within the pattern.c file. This flaw can be triggered by a specially crafted XSL style sheet containing an excessively long XSLT "transformation match" condition, affecting Red Hat Enterprise Linux and related products. The vulnerability carries a CVSS score of 7.5, indicating high severity, and allows unauthenticated remote attackers to cause a denial of service or potentially execute arbitrary code with low attack complexity. Its EPSS score is low, suggesting a low probability of exploitation. While not listed on the KEV catalog or Hot List, an ExploitDB entry (EDB-31815) exists, confirming the availability of proof-of-concept exploit code. There is no evidence of active exploitation, nor significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3CPE matchmatch criteria | cpe:2.3:o:redhat:desktop:3:*:*:*:*:*:*:* | ||
2.1CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:* | ||
2.1CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:* | ||
2.1CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:3.0:*:as:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.