USN-7659-1

Dashboard / Vulnerabilities / USN-7659-1

USN-7659-1

Summary: ruby-nokogiri vulnerabilities

Details: It was discovered Nokogiri did not correctly parse XML Schemas. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-26247) Agustin Gianni discovered that Nokogiri did not correctly parse XML and HTML files. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or leak sensitive information. (CVE-2022-29181)

References: https://ubuntu.com/security/notices/USN-7659-1, https://ubuntu.com/security/CVE-2020-26247, https://ubuntu.com/security/CVE-2022-29181, https://ubuntu.com/security/CVE-2022-40303