Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-28366HistoryApr 21, 2022 - 11:15 p.m.
CVE-2022-28366
2022-04-2123:15:00
Debian Security Bug Tracker
security-tracker.debian.org
34
0.001 Low
EPSS
Percentile
43.6%
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 (also affecting OWASP AntiSamy before 1.6.6), but 1.9.22 is the last version of CyberNeko HTML. NOTE: this may be related to CVE-2022-24839.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libowasp-antisamy-java | <=Â 1.5.3+dfsg-1.1 | libowasp-antisamy-java_1.5.3+dfsg-1.1_all.deb |
| Debian | 11 | all | libowasp-antisamy-java | <=Â 1.5.3+dfsg-1.1 | libowasp-antisamy-java_1.5.3+dfsg-1.1_all.deb |
| Debian | 10 | all | libowasp-antisamy-java | <=Â 1.5.3+dfsg-1 | libowasp-antisamy-java_1.5.3+dfsg-1_all.deb |
| Debian | 999 | all | libowasp-antisamy-java | <Â 1.7.4-1 | libowasp-antisamy-java_1.7.4-1_all.deb |
| Debian | 13 | all | libowasp-antisamy-java | <Â 1.7.4-1 | libowasp-antisamy-java_1.7.4-1_all.deb |
Related
nessus
nessus
osv
osv
CVE-2022-28366
2022-04-21 23:15:10
CVE-2022-24839
2022-04-11 22:15:07
Denial of Service (DoS) in Nokogiri on JRuby
2022-04-11 21:38:11
cvelist
cvelist
CVE-2022-28366
2022-04-21 22:41:53
CVE-2022-24839 Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)
2022-04-11 21:25:12
CVE-2022-29546
2022-04-25 02:54:59
ubuntucve
ubuntucve
CVE-2022-28366
2022-04-21 00:00:00
CVE-2022-24839
2022-04-11 00:00:00
atlassian
atlassian
cve
cve
prion
prion
Input validation
2022-04-21 23:15:00
Design/Logic Flaw
2022-04-11 22:15:00
Design/Logic Flaw
2022-04-25 03:15:00
veracode
veracode
Denial Of Service (DoS)
2022-04-13 02:50:56
Denial Of Service (DoS)
2022-04-22 08:18:14
github
github
Denial of Service (DoS) in Nokogiri on JRuby
2022-04-11 21:38:11
org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption
2023-06-22 19:58:54
Denial of service in HtmlUnit-Neko
2022-04-23 00:03:04
ibm
ibm
debiancve
debiancve
CVE-2022-24839
2022-04-11 22:15:00
redhatcve
redhatcve
CVE-2022-24839
2022-04-12 04:59:47
rubygems
rubygems
Denial of Service (DoS) in Nokogiri on JRuby
2022-04-10 21:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00