Skip to content
OpenAdvisories

Archive

15 December 2015

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High —

    Nokogiri subject to DoS via libxml2 vulnerability

    The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability tha…