CVE-2022-24836

🗓️ 11 Apr 2022 00:00:00Reported by ubuntu.comType

Nokogiri library has regex vulnerabilit

Reporter	Title	Published	Views	Family All 53
Debian CVE	CVE-2022-24836	11 Apr 202222:15	–	debiancve
Debian	[SECURITY] [DLA 3003-1] ruby-nokogiri security update	13 May 202217:29	–	debian
Debian	[SECURITY] [DLA 3149-1] ruby-nokogiri security update	12 Oct 202214:46	–	debian
Prion	Design/Logic Flaw	11 Apr 202222:15	–	prion
NVD	CVE-2022-24836	11 Apr 202222:15	–	nvd
CVE	CVE-2022-24836	11 Apr 202222:15	–	cve
Tenable Nessus	Amazon Linux AMI : rubygem-nokogiri, rubygem18-nokogiri (ALAS-2022-1595)	10 Jun 202200:00	–	nessus
Tenable Nessus	Debian dla-3868 : ruby-nokogiri - security update	3 Sep 202400:00	–	nessus
Tenable Nessus	Debian DLA-3003-1 : ruby-nokogiri - LTS security update	14 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : (ALAS2022-2022-062)	6 Sep 202200:00	–	nessus

Source	Link
github	www.github.com/sparklemotion/nokogiri/security/advisories/GHSA-crjr-9rc5-ghw8
github	www.github.com/sparklemotion/nokogiri/commit/e444525ef1634b675cd1cf52d39f4320ef0aecfd
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24836
launchpad	www.launchpad.net/bugs/cve/CVE-2022-24836
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-24836

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	ruby-nokogiri	any	UNKNOWN
ubuntu	20.04	noarch	ruby-nokogiri	any	UNKNOWN
ubuntu	22.04	noarch	ruby-nokogiri	any	UNKNOWN
ubuntu	14.04	noarch	ruby-nokogiri	any	UNKNOWN
ubuntu	16.04	noarch	ruby-nokogiri	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Apr 2022 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS25.0

CVSS37.5

EPSS0.009