critical9.8
CVE-2016-4658
Nokogiri does not forbid namespace nodes in XPointer ranges
Impact
xpointer.c in libxml2 before 2.9.5 (as used in nokogiri before 1.7.1 amongst other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rubygems | nokogiri | < 1.7.1 | 1.7.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | before 10.0 |
| Apple | Mac Os X | before 10.12 |
| Apple | Tvos | before 10.0 |
| Apple | Watchos | before 3.0 |
| Xmlsoft | Libxml2 | before 2.9.5 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
- http://www.securityfocus.com/bid/93054
- http://www.securitytracker.com/id/1036858
- http://www.securitytracker.com/id/1038623
- https://git.gnome.org/browse/libxml2/commit/?id=c1d1f7121194036608bf555f08d3062a36fd344b
- https://security.gentoo.org/glsa/201701-37
- https://support.apple.com/HT207141
- https://support.apple.com/HT207142
- https://support.apple.com/HT207143
- https://support.apple.com/HT207170
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://github.com/advisories/GHSA-fr52-4hqw-p27f
- https://nvd.nist.gov/vuln/detail/CVE-2016-4658