What is GHSA-62qp-3fxm-9wxf?

GHSA-62qp-3fxm-9wxf is a security advisory published by GitHub Security Advisories with Medium severity. Nokogiri vulnerable to DoS while parsing XML documents

Which CVE IDs does GHSA-62qp-3fxm-9wxf cover?

GHSA-62qp-3fxm-9wxf covers the following CVE IDs: CVE-2013-6460. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-62qp-3fxm-9wxf?

GHSA-62qp-3fxm-9wxf has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-62qp-3fxm-9wxf?

GHSA-62qp-3fxm-9wxf affects 2 products, including: rubygems/nokogiri:\u003e= 1.5.0, \u003c 1.5.11; rubygems/nokogiri:\u003e= 1.6.0, \u003c 1.6.1.

GHSA-62qp-3fxm-9wxfMediumCVSS 6.5

Nokogiri vulnerable to DoS while parsing XML documents

Vendor

GitHub Security Advisories

Published

May 5, 2022

Last Modified

June 9, 2023

🔗 CVE IDs covered (1)

CVE-2013-6460 →

📋 Description

Nokogiri gem has Denial of Service via infinite loop when parsing XML documents

🎯 Affected products2

rubygems/nokogiri:>= 1.5.0, < 1.5.11
rubygems/nokogiri:>= 1.6.0, < 1.6.1

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2013-6460
https://access.redhat.com/security/cve/cve-2013-6460
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6460
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6460
https://exchange.xforce.ibmcloud.com/vulnerabilities/90058
https://security-tracker.debian.org/tracker/CVE-2013-6460
http://www.openwall.com/lists/oss-security/2013/12/27/2
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2013-6460.yml
https://web.archive.org/web/20200229074427/https://www.securityfocus.com/bid/64513/
https://github.com/advisories/GHSA-62qp-3fxm-9wxf