Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3890
HistoryApr 12, 2017 - 8:23 a.m.

Null Pointer Dereference Through Libxml2

2017-04-1208:23:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

nokogiri uses the libxml2 C library. The version that nokogiri uses is vulnerable to CVE-2017-5969 which allows a malicious user to pass a file to the application, triggering a null pointer dereference causing it to crash.