cbcvebase.
CVE-2013-6460
published 2019-11-05

CVE-2013-6460: Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents

medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents

Affected

15 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debiandebian_linux
debiandebian_linux
debianruby-nokogiri
nokogirinokogiri>= 1.5.0 < 1.5.111.5.11
nokogirinokogiri>= 1.5.0 < 1.5.111.5.11
nokogirinokogiri>= 1.6.0 < 1.6.11.6.1
nokogirinokogiri>= 1.6.0 < 1.6.11.6.1
redhatcloudforms_management_engine
redhatenterprise_mrg
redhatopenstack
redhatopenstack
redhatsatellite
rubynokogiri_gem
rubynokogiri_gem