Description
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
References (7)
Scores
CVSS v3
6.5
EPSS
0.0252
EPSS Percentile
85.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-776
Status
published
Products (11)
debian/debian_linux
8.0
debian/debian_linux
9.0
debian/debian_linux
10.0
nokogiri/nokogiri
1.5.0 - 1.5.11
redhat/cloudforms_management_engine
5.0
redhat/enterprise_mrg
2.0
redhat/openstack
3.0
redhat/openstack
4.0
redhat/satellite
6.0
redhat/subscription_asset_manager
... and 1 more
Published
Nov 05, 2019
Tracked Since
Feb 18, 2026