提交 #601005: sparklemotion nokogiri nokogiri v1.18.7 (commit a024cff) Heap-based Buffer Overflow信息

标题sparklemotion nokogiri nokogiri v1.18.7 (commit a024cff) Heap-based Buffer Overflow
描述A heap-buffer-overflow in nokogiri v1.18.7 (commit a024cff) in the function hashmap_set_with_hash at the file gumbo-parser/src/hashmap.c:286:5 could be exploited by attackers to cause a denial of service (DoS) via specially crafted input.
来源⚠️ https://github.com/sparklemotion/nokogiri/issues/3500
用户
 JJLeo (UID 86307)
提交2025-06-20 04時57分 (10 月前)
管理2025-06-21 17時09分 (2 days later)
状态已接受
VulDB条目313601 [sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 hashmap.c hashmap_set_with_hash 内存损坏]
积分17

Interested in the pricing of exploits?

See the underground prices here!