GitHub Advisoryadvisory · RubyGems

GHSA-fr52-4hqw-p27f Nokogiri does not forbid namespace nodes in XPointer ranges

CRITICAL Published 2018-08-21 Modified 2022-04-26 Official page ↗
Aliases
CVE-2016-4658
Ecosystem
RubyGems
Packages
nokogiri
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-119
Reviewed
2020-06-16

Affected packages

• RubyGems nokogiri: < 1.7.1 → fixed in 1.7.1

Description

xpointer.c in libxml2 before 2.9.5 (as used in nokogiri before 1.7.1 amongst other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.

Related

Alias · CVE (1)

  • CVE-2016-4658 xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other… vulnerability

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References