Отправить #601006: sparklemotion nokogiri nokogiri v1.18.7 (commit a024cff) Heap-based Buffer OverflowИнформация

Названиеsparklemotion nokogiri nokogiri v1.18.7 (commit a024cff) Heap-based Buffer Overflow
ОписаниеA heap-buffer-overflow in nokogiri v1.18.7 (commit a024cff) in the function hashmap_get_with_hash at the file gumbo-parser/src/hashmap.c:337:34 could be exploited by attackers to cause a denial of service (DoS) via specially crafted input.
Источник⚠️ https://github.com/sparklemotion/nokogiri/issues/3508
Пользователь
 JJLeo (UID 86307)
Представление20.06.2025 05:00 (1 Год назад)
Модерация22.06.2025 08:43 (2 days later)
Статуспринято
Запись VulDB313611 [sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 hashmap.c hashmap_get_with_hash повреждение памяти]
Баллы17

Interested in the pricing of exploits?

See the underground prices here!