CVE-2013-6461

Published: 05 November 2019

Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
libnokogiri-ruby Launchpad, Ubuntu, Debian	Upstream	Needs triage





	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist
ruby-nokogiri Launchpad, Ubuntu, Debian	Upstream	Needs triage





	Ubuntu 14.04 ESM (Trusty Tahr)	Not vulnerable (code not present)

Author	Note
mdeslaur	this is for JRuby only

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.