Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4233
HistoryMay 16, 2017 - 2:21 a.m.

Copy-Paste Vulnerability (CPV) Through Libxml2

2017-05-1602:21:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

nokogiri has a copied version of the libxml2 library. The copy that nokogiri includes is vulnerable to CVE-2017-8872 which allows attackers to cause a denial of service (DoS) or information disclosure via a buffer overflow. This is caused by the htmlParseTryOrFinish method in the HTMLparser.c file.