Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
fedoraFedoraFEDORA:BD64130584FF
HistoryDec 18, 2022 - 1:41 a.m.

[SECURITY] Fedora 37 Update: rubygem-nokogiri-1.13.10-1.fc37

2022-12-1801:41:02
lists.fedoraproject.org
16
nokogiri parsing xml
html
css3 support

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

46.9%

JSON

Nokogiri parses and searches XML/HTML very quickly, and also has correctly implemented CSS3 selector support as well as XPath support. Nokogiri also features an Hpricot compatibility layer to help ease the change to using correct CSS and XPath.

OSVersionArchitecturePackageVersionFilename
Fedora37anyrubygem-nokogiri< 1.13.10UNKNOWN

Related

debiancve 1
redhatcve 1
cvelist 1
veracode 2
gentoo 1
alpinelinux 1
fedora 1
rubygems 1
prion 1
ubuntucve 1
cve 1
nvd 1
openvas 2
nessus 2
osv 4
github 1
ibm 1
redos 1
debiancve
debiancve
CVE-2022-23476
2022-12-08 04:15:09
redhatcve
redhatcve
CVE-2022-23476
2022-12-14 13:05:01
cvelist
cvelist
CVE-2022-23476 Unchecked return value from xmlTextReaderExpand in Nokogiri
2022-12-08 03:03:24
veracode
veracode
Denial Of Service (DoS)
2022-12-21 06:07:12
Denial Of Service (DoS)
2022-12-14 15:37:31
gentoo
gentoo
Nokogiri: Denial of Service
2024-08-07 00:00:00
alpinelinux
alpinelinux
CVE-2022-23476
2022-12-08 04:15:09
fedora
fedora
[SECURITY] Fedora 36 Update: rubygem-nokogiri-1.13.10-1.fc36
2022-12-18 01:41:09
rubygems
rubygems
Unchecked return value from xmlTextReaderExpand
2022-12-06 21:00:00
prion
prion
Null pointer dereference
2022-12-08 04:15:00
ubuntucve
ubuntucve
CVE-2022-23476
2022-12-08 00:00:00
cve
cve
CVE-2022-23476
2022-12-08 04:15:09
nvd
nvd
CVE-2022-23476
2022-12-08 04:15:09
openvas
openvas
Fedora: Security Advisory for rubygem-nokogiri (FEDORA-2022-acff3f54b2)
2022-12-18 00:00:00
Fedora: Security Advisory for rubygem-nokogiri (FEDORA-2022-b5c325caad)
2022-12-18 00:00:00
nessus
nessus
Fedora 36 : rubygem-nokogiri (2022-acff3f54b2)
2022-12-22 00:00:00
GLSA-202408-13 : Nokogiri: Denial of Service
2024-08-07 00:00:00
osv
osv
Unchecked return value from xmlTextReaderExpand
2022-12-08 03:03:33
CVE-2022-23476
2022-12-08 04:15:09
ruby3.2-rubygem-nokogiri-1.15.4-1.1 on GA media
2024-06-15 00:00:00
github
github
Unchecked return value from xmlTextReaderExpand
2022-12-08 03:03:33
ibm
ibm
Security Bulletin: Vulnerabilities in Logstash affect IBM Operations Analytics - Log Analysis (CVE-2022-29181, CVE-2022-23476)
2024-09-12 06:57:45
redos
redos
ROS-20230929-01
2023-09-29 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

46.9%

JSON
Related for FEDORA:BD64130584FF
debiancve1redhatcve1cvelist1veracode2gentoo1alpinelinux1fedora1rubygems1prion1ubuntucve1cve1nvd1openvas2nessus2osv4github1ibm1redos1