medium6.5
CVE-2013-6460
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
Impact
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokogiri | Nokogiri | from 1.5.0 before 1.5.11 from 1.6.0 before 1.6.1 |
| Debian | Debian Linux | Versions 8.0, 9.0, 10.0 |
| Redhat | Cloudforms Management Engine | Version 5.0 |
| Redhat | Openstack | Versions 3.0, 4.0 |
| Redhat | Satellite | Version 6.0 |
| Redhat | Subscription Asset Manager | All versions |
| Redhat | Enterprise Mrg | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2013/12/27/2
- http://www.securityfocus.com/bid/64513
- https://access.redhat.com/security/cve/cve-2013-6460
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6460
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6460
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90058
- https://security-tracker.debian.org/tracker/CVE-2013-6460
- http://www.openwall.com/lists/oss-security/2013/12/27/2
- http://www.securityfocus.com/bid/64513
- https://access.redhat.com/security/cve/cve-2013-6460
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6460
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6460
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90058
- https://security-tracker.debian.org/tracker/CVE-2013-6460