vulnerability
SUSE: CVE-2022-29181: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:P/I:N/A:P) | May 20, 2022 | Nov 17, 2022 | Nov 17, 2022 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:P)
Published
May 20, 2022
Added
Nov 17, 2022
Modified
Nov 17, 2022
Description
Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory. Version 1.13.6 contains a patch for this issue. As a workaround, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.
Solutions
suse-upgrade-ruby2-5-rubygem-nokogirisuse-upgrade-ruby2-5-rubygem-nokogiri-docsuse-upgrade-ruby2-5-rubygem-nokogiri-testsuite
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.