CVE-2015-8806
1 advisory.
RubyGems/nokogiri CVE-2015-8806: high 7.5, EPSS 4.96%
Denial of service or RCE from libxml2 and libxslt
Action: Upgrade nokogiri to 1.6.8 or later.
bundle update nokogiriAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 1.6.8 | - |
Fixed versions
| 1.6.8 |
Sources
- osv: GHSA-7hp2-xwpj-95jq
- https://nvd.nist.gov/vuln/detail/CVE-2015-8806
- https://github.com/sparklemotion/nokogiri/issues/1473
- https://bugzilla.gnome.org/show_bug.cgi?id=749115
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2015-8806.yml
- https://github.com/sparklemotion/nokogiri
- https://security.gentoo.org/glsa/201701-37
- https://web.archive.org/web/20160928171015/http://www.securityfocus.com/bid/82071
- https://www.debian.org/security/2016/dsa-3593
- http://www.openwall.com/lists/oss-security/2016/02/03/5
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://www.ubuntu.com/usn/USN-2994-1
CVE-2015-8806 · published · modified · JSON