CVE-2015-9019

In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
Affected Products (NVD)
VendorProductVersion
xmlsoftlibxslt
𝑥
≤ 1.1.29
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libxslt
bookworm
unimportant
bullseye
unimportant
bullseye (security)
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libxslt
artful
ignored
bionic
ignored
cosmic
ignored
disco
ignored
eoan
ignored
focal
ignored
groovy
ignored
hirsute
ignored
impish
ignored
jammy
ignored
kinetic
ignored
precise
ignored
trusty
ignored
xenial
ignored
yakkety
ignored
zesty
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libxslt-devel
suse enterprise desktop 15
1.1.32-1.25
fixed
suse enterprise desktop 15 SP1
1.1.32-1.25
fixed
suse enterprise desktop 15 SP2
1.1.32-3.8.24
fixed
suse enterprise desktop 15 SP3
1.1.32-3.8.24
fixed
suse enterprise desktop 15 SP4
1.1.34-150400.1.7
fixed
suse enterprise desktop 15 SP5
1.1.34-150400.3.3.1
fixed
suse enterprise desktop 15 SP6
1.1.34-150400.3.3.1
fixed
suse enterprise desktop 15 SP7
1.1.34-150400.3.6.1
fixed
suse enterprise sap 15
1.1.32-1.25
fixed
suse enterprise sap 15 SP1
1.1.32-1.25
fixed
suse enterprise sap 15 SP2
1.1.32-3.8.24
fixed
suse enterprise sap 15 SP3
1.1.32-3.8.24
fixed
suse enterprise sap 15 SP4
1.1.34-150400.1.7
fixed
suse enterprise sap 15 SP5
1.1.34-150400.3.3.1
fixed
suse enterprise sap 15 SP6
1.1.34-150400.3.3.1
fixed
suse enterprise sap 15 SP7
1.1.34-150400.3.6.1
fixed
suse enterprise server 15
1.1.32-1.25
fixed
suse enterprise server 15 SP1
1.1.32-1.25
fixed
suse enterprise server 15 SP2
1.1.32-3.8.24
fixed
suse enterprise server 15 SP3
1.1.32-3.8.24
fixed
suse enterprise server 15 SP4
1.1.34-150400.1.7
fixed
suse enterprise server 15 SP5
1.1.34-150400.3.3.1
fixed
suse enterprise server 15 SP6
1.1.34-150400.3.3.1
fixed
suse enterprise server 15 SP7
1.1.34-150400.3.6.1
fixed
libxslt-tools
suse enterprise desktop 15
1.1.32-1.25
fixed
suse enterprise desktop 15 SP1
1.1.32-1.25
fixed
suse enterprise desktop 15 SP2
1.1.32-3.8.24
fixed
suse enterprise desktop 15 SP3
1.1.32-3.8.24
fixed
suse enterprise desktop 15 SP4
1.1.34-150400.1.7
fixed
suse enterprise desktop 15 SP5
1.1.34-150400.3.3.1
fixed
suse enterprise desktop 15 SP6
1.1.34-150400.3.3.1
fixed
suse enterprise desktop 15 SP7
1.1.34-150400.3.6.1
fixed
suse enterprise sap 12 SP1
1.1.28-16.1
fixed
suse enterprise sap 12 SP2
1.1.28-16.1
fixed
suse enterprise sap 12 SP5
1.1.28-17.6.1
fixed
suse enterprise sap 15
1.1.32-1.25
fixed
suse enterprise sap 15 SP1
1.1.32-1.25
fixed
suse enterprise sap 15 SP2
1.1.32-3.8.24
fixed
suse enterprise sap 15 SP3
1.1.32-3.8.24
fixed
suse enterprise sap 15 SP4
1.1.34-150400.1.7
fixed
suse enterprise sap 15 SP5
1.1.34-150400.3.3.1
fixed
suse enterprise sap 15 SP6
1.1.34-150400.3.3.1
fixed
suse enterprise sap 15 SP7
1.1.34-150400.3.6.1
fixed
suse enterprise server 12 SP1
1.1.28-16.1
fixed
suse enterprise server 12 SP2
1.1.28-16.1
fixed
suse enterprise server 12 SP3
1.1.28-16.1
fixed
suse enterprise server 12 SP4
1.1.28-16.1
fixed
suse enterprise server 12 SP5
1.1.28-17.6.1
fixed
suse enterprise server 15
1.1.32-1.25
fixed
suse enterprise server 15 SP1
1.1.32-1.25
fixed
suse enterprise server 15 SP2
1.1.32-3.8.24
fixed
suse enterprise server 15 SP3
1.1.32-3.8.24
fixed
suse enterprise server 15 SP4
1.1.34-150400.1.7
fixed
suse enterprise server 15 SP5
1.1.34-150400.3.3.1
fixed
suse enterprise server 15 SP6
1.1.34-150400.3.3.1
fixed
suse enterprise server 15 SP7
1.1.34-150400.3.6.1
fixed
libxslt1
suse enterprise desktop 15
1.1.32-1.25
fixed
suse enterprise desktop 15 SP1
1.1.32-1.25
fixed
suse enterprise desktop 15 SP2
1.1.32-3.8.24
fixed
suse enterprise desktop 15 SP3
1.1.32-3.8.24
fixed
suse enterprise desktop 15 SP4
1.1.34-150400.1.7
fixed
suse enterprise desktop 15 SP5
1.1.34-150400.3.3.1
fixed
suse enterprise desktop 15 SP6
1.1.34-150400.3.3.1
fixed
suse enterprise desktop 15 SP7
1.1.34-150400.3.6.1
fixed
suse enterprise sap 12 SP1
1.1.28-16.1
fixed
suse enterprise sap 12 SP2
1.1.28-16.1
fixed
suse enterprise sap 12 SP5
1.1.28-17.6.1
fixed
suse enterprise sap 15
1.1.32-1.25
fixed
suse enterprise sap 15 SP1
1.1.32-1.25
fixed
suse enterprise sap 15 SP2
1.1.32-3.8.24
fixed
suse enterprise sap 15 SP3
1.1.32-3.8.24
fixed
suse enterprise sap 15 SP4
1.1.34-150400.1.7
fixed
suse enterprise sap 15 SP5
1.1.34-150400.3.3.1
fixed
suse enterprise sap 15 SP6
1.1.34-150400.3.3.1
fixed
suse enterprise sap 15 SP7
1.1.34-150400.3.6.1
fixed
suse enterprise server 12 SP1
1.1.28-16.1
fixed
suse enterprise server 12 SP2
1.1.28-16.1
fixed
suse enterprise server 12 SP3
1.1.28-16.1
fixed
suse enterprise server 12 SP4
1.1.28-16.1
fixed
suse enterprise server 12 SP5
1.1.28-17.6.1
fixed
suse enterprise server 15
1.1.32-1.25
fixed
suse enterprise server 15 SP1
1.1.32-1.25
fixed
suse enterprise server 15 SP2
1.1.32-3.8.24
fixed
suse enterprise server 15 SP3
1.1.32-3.8.24
fixed
suse enterprise server 15 SP4
1.1.34-150400.1.7
fixed
suse enterprise server 15 SP5
1.1.34-150400.3.3.1
fixed
suse enterprise server 15 SP6
1.1.34-150400.3.3.1
fixed
suse enterprise server 15 SP7
1.1.34-150400.3.6.1
fixed
libxslt1-32bit
suse enterprise sap 12 SP1
1.1.28-16.1
fixed
suse enterprise sap 12 SP2
1.1.28-16.1
fixed
suse enterprise sap 12 SP5
1.1.28-17.6.1
fixed
suse enterprise server 12 SP1
1.1.28-16.1
fixed
suse enterprise server 12 SP2
1.1.28-16.1
fixed
suse enterprise server 12 SP3
1.1.28-16.1
fixed
suse enterprise server 12 SP4
1.1.28-16.1
fixed
suse enterprise server 12 SP5
1.1.28-17.6.1
fixed
Common Weakness Enumeration
References
https://bugzilla.gnome.org/show_bug.cgi?id=758400
https://bugzilla.suse.com/show_bug.cgi?id=934119
https://bugzilla.gnome.org/show_bug.cgi?id=758400
https://bugzilla.suse.com/show_bug.cgi?id=934119