CVE-2013-4520: xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via...

Security readout for executives and security teams

CVE-2013-4520 is a denial-of-service issue in libxslt. If a system processes attacker-controlled XSLT stylesheets, a crafted stylesheet can crash the process. The impact is availability, not documented data theft or code execution in the supplied sources. Exposure is most likely where applications, APIs, batch jobs, or document-processing services use libxslt to transform untrusted XML/XSLT input. Systems that never accept user-controlled stylesheets are less likely to be reachable. Treat this as a targeted availability risk. Prioritize internet-facing or customer-facing services that process uploaded XML/XSLT, then address internal batch or document pipelines through normal patch management. Mitigation focus: Inventory systems and containers with libxslt installed or bundled.; Apply vendor security updates or upgrade libxslt to a fixed vendor-supported release.; Check SUSE advisories if using affected SUSE packages..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.