Denial Of Service (DoS)

🗓️ 05 Aug 2024 04:51:38Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 15 Views

REXML vulnerability to denial of servic

Reporter	Title	Published	Views	Family All 188
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by multiple vulnerabilities	21 Oct 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in XML toolkit for Ruby affects IBM License Metric Tool.	17 Sep 202408:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	15 Apr 202503:11	–	ibm
Tenable Nessus	Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2025-921)	1 Apr 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0183: pcs (ALINUX3-SA-2024:0183)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : pcs (ALSA-2024:6670)	17 Sep 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : ruby:3.3 (ALSA-2024:6784)	20 Sep 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : ruby:3.3 (ALSA-2024:6785)	20 Sep 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : ruby:3.1 (ALSA-2025:4488)	8 May 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2024-2895)	8 Nov 202400:00	–	nessus

Vulners

Node

ruby-rexml ruby-rexmlMatch3.2.5-r0ruby

AND

ruby-rexml ruby-rexmlMatch3.2.5-r2ruby

AND

ruby-rexml ruby-rexmlMatch3.2.6-r0ruby

AND

ruby-rexml ruby-rexmlMatch3.2.6-r1ruby

AND

ruby-rexml ruby-rexmlMatch3.2.9-r0ruby

AND

ruby-rexml ruby-rexmlMatch3.2.5-r3ruby

AND

ruby-rexml ruby-rexmlMatch3.2.5-r1ruby

AND

alpinelinux alpine_linuxMatchedge

OR

ruby-rexml ruby-rexmlMatch3.2.9-r0ruby

AND

ruby-rexml ruby-rexmlMatch3.2.6-r1ruby

AND

alpinelinux alpine_linuxMatch3.20

OR

ruby-rexml ruby-rexmlMatch3.2.6-r0ruby

AND

alpinelinux alpine_linuxMatch3.19

OR

ruby-rexml ruby-rexmlMatch3.2.9-r0ruby

AND

alpinelinux alpine_linuxMatch3.21

OR

ruby2.7 ruby2.7Match2.7.2-3debian

AND

debian debian_linuxMatch11

OR

ruby-lang rexmlRange3.1.7.3–3.3.2ruby

Source	Link
ruby-lang	www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123/
github	www.github.com/ruby/rexml/commit/2c39c91a65d69357cfbc35dd8079b3606d86bb70
github	www.github.com/advisories/GHSA-r55c-59qm-vjw6
github	www.github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8
github	www.github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh
github	www.github.com/ruby/rexml/security/advisories/GHSA-r55c-59qm-vjw6
security	www.security.netapp.com/advisory/ntap-20241227-0005/
ruby-lang	www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rexml/CVE-2024-41123.yml

27 Dec 2024 17:13Current

7High risk

Vulners AI Score7

CVSS 3.15.3 - 7.5

EPSS0.00239

SSVC

rexml vulnerability denial of service parsing xml specific characters