Description
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ruby Nokogiri gem
1.5.xaffected1.6.xaffected
References
- https://security-tracker.debian.org/tracker/CVE-2013-6461 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6461 ↗
- https://access.redhat.com/security/cve/cve-2013-6461 ↗
- http://www.openwall.com/lists/oss-security/2013/12/27/2 ↗
- http://www.securityfocus.com/bid/64513 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90059 ↗