CVE-2022-24839

🗓️ 11 Apr 2022 21:25:12Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 317 Views

org.cyberneko.html fork in Nokogiri (Rubygem) <= 1.9.21.noko1 raises OutOfMemoryError on ill-formed HTML. Upgrade to >= 1.9.22.noko

Reporter	Title	Published	Views	Family All 125
IBM Security Bulletins	Security Bulletin: IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty vulnerable because Sparkle Motion Nokogiri is vulnerable to a denial of service, (CVE-2022-24839)	8 Dec 202206:04	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component	21 Dec 202221:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance is vulnerable to denial of service (CVE-2022-24839)	20 Apr 202310:45	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM® Engineering Lifecycle Management products recommendation for Denial of Service due to Neko HTML in WebSphere Application Server Liberty (CVE-2022-24839)	3 Nov 202213:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is vulnerable to a Denial of Service due to Neko HTML (CVE-2022-24839)	30 Sep 202218:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to HTTP header injection and affected by denial of services due to multiple vulnerabilities.	2 Feb 202304:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is vulnerable to denial of service due to Websphere Liberty (CVE-2022-24839)	23 Nov 202221:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by a denial of service issue in IBM WebSphere Application Server Liberty (CVE-2022-24839)	3 Nov 202212:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	26 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting Watson Machine Learning Accelerator on Cloud Pak for Data version	13 Nov 202315:22	–	ibm

NVD

Vulners

Node

nekohtml_project nekohtmlRange<1.9.22.noko2nokogiri

Node

oracle weblogic_serverMatch12.2.1.3.0

oracle weblogic_serverMatch12.2.1.4.0

oracle weblogic_serverMatch14.1.1.0.0

[
  {
    "product": "nekohtml",
    "vendor": "sparklemotion",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.9.22.noko2"
      }
    ]
  }
]

Source	Link
github	www.github.com/sparklemotion/nekohtml/commit/a800fce3b079def130ed42a408ff1d09f89e773d
github	www.github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv
oracle	www.oracle.com/security-alerts/cpujul2022.html

21 Nov 2024 06:51Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.00454

SSVC

CWE-400