Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4248
HistoryMay 18, 2017 - 3:11 a.m.

Heap-Based Buffer Overflow In Libxml2

2017-05-1803:11:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

nokogiri gem is using libxml2 which is vulnerable to CVE-2016-1834. The vulnerability exists when xmlStrlen returns a negative length in the xmlStrncat function. Therefore, it may lead to other attacks such as denial of service or arbitrary code execution through a heap-based buffer overflow using a malicious XML input.