CVE-2013-6460

Description

Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://security-tracker.debian.org/tracker/CVE-2013-6460 ↗
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6460 ↗
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6460 ↗
• https://access.redhat.com/security/cve/cve-2013-6460 ↗
• http://www.openwall.com/lists/oss-security/2013/12/27/2 ↗
• http://www.securityfocus.com/bid/64513 ↗
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90058 ↗