Publish GHSA-882p-jqgm-f45g

This commit is contained in:
advisory-database[bot]
2023-05-13 05:02:46 +00:00
parent 3497398150
commit a9c5547b50
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-882p-jqgm-f45g",
"modified": "2021-09-07T14:55:47Z",
"modified": "2023-05-04T19:56:39Z",
"published": "2018-04-13T16:17:46Z",
"aliases": [
"CVE-2017-18258"
],
"summary": "Moderate severity vulnerability that affects nokogiri",
"summary": "Uncontrolled resource consumption in nokogiri",
"details": "The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.",
"severity": [
{