netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-jxjr-5h69-qw3w

Browse Source
This commit is contained in:
advisory-database[bot]
2023-07-05 17:46:53 +00:00
parent 9545643d2e
commit de312ac9f2
1 changed files with 4 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2018/09/GHSA-jxjr-5h69-qw3w/GHSA-jxjr-5h69-qw3w.json
+4 -52
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jxjr-5h69-qw3w",
"modified": "2023-02-13T18:16:43Z",
"modified": "2023-07-05T17:45:36Z",
"published": "2018-09-17T21:57:38Z",
"aliases": [
"CVE-2015-7499"
],
"summary": "Heap-based buffer overflow in nokogiri",
"details": "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.",
"details": "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or crash the application.",
"severity": [
],
@@ -64,45 +64,17 @@
"type": "WEB",
"url": "https://groups.google.com/forum/#!topic/ruby-security-ann/Dy7YiKb_pMM"
},
{
"type": "WEB",
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201701-37"
},
{
"type": "WEB",
"url": "https://support.apple.com/HT206166"
"url": "https://web.archive.org/web/20210724022841/http://www.securityfocus.com/bid/79509"
},
{
"type": "WEB",
"url": "https://support.apple.com/HT206167"
},
{
"type": "WEB",
"url": "https://support.apple.com/HT206168"
},
{
"type": "WEB",
"url": "https://support.apple.com/HT206169"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"
"url": "https://web.archive.org/web/20211205133229/https://securitytracker.com/id/1034243"
},
{
"type": "WEB",
@@ -112,10 +84,6 @@
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq&m=145382616617563&w=2"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-2549.html"
@@ -124,26 +92,10 @@
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-2550.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-1089.html"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2015/dsa-3430"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/79509"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1034243"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2834-1"