Nokogiri gem contains a heap-based buffer overflow vulnerability in libxml2

🗓️ 19 Jan 2016 00:00:00Reported by RubySecType

rubygems

rubygems🔗 rubysec.com👁 35 Views

Nokogiri gem libxml2 buffer overflow CVE-2015-749

Reporter	Title	Published	Views	Family All 184
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Libxml2 affect IBM Security Network Protection	16 Jun 201821:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple liblxm2 vulnerabilities	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libxml2 affect PowerKVM	18 Jun 201801:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in XML processing affect IBM DataPower Gateways	8 Jun 202122:18	–	ibm
IBM Security Bulletins	Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager Virtual Appliance available	16 Jun 201821:40	–	ibm
IBM Security Bulletins	Security Bulletins - Cognos Analytics and Cognos Business Intelligence	19 Jul 201816:57	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSource libXML2 Vulnerabilities affect Identity Insight 8.1	16 Jun 201813:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libpng and libxml affect Rational DOORS	1 May 202008:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server 2016Q1 Security Updater : IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.	15 Jun 201823:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Libxml2 affect Rational Systems Tester	17 Jun 201805:07	–	ibm

Vulners

Node

ruby nokogiriRange≤1.6.7.2

Source	Link
groups	www.groups.google.com/forum/

19 Jan 2016 00:00Current

3.7Low risk

Vulners AI Score3.7

CVSS 25

EPSS0.06464

nokogiri gem libxml2 vulnerability cve-2015-7499 buffer overflow denial of service security patch