Sha256: 8ca99ce735a82acbc0bf57980b9375cac3846d827fd3ff387c1c86c7f3f629a4
Contents?: true
Size: 1.14 KB
Versions: 13
Compression:
Stored size: 1.14 KB
Contents
module Dawn
module Kb
# Automatically created with rake on 2015-12-03
class CVE_2015_1819
# Include the testing skeleton for this CVE
# include PatternMatchCheck
include DependencyCheck
# include RubyVersionCheck
def initialize
title="Nokogiri denial of service (DoS) Memory Consumption"
message="Nokogiri versions before 1.6.6.4 contain a vulnerable version of libxml2 as a C extension. The vulnerability allows for memory consumption denial of service."
super({
:title=>title,
:name=> "CVE-2015-1819",
:cve=>"2015-1819",
:osvdb=>"",
:cvss=>"AV:N/AC:L/Au:N/C:N/I:N/A:P",
:release_date => Date.new(2015, 8, 14),
:cwe=>"",
:owasp=>"A9",
:applies=>["rails", "sinatra", "padrino"],
:kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
:message=>message,
:mitigation=>"Please upgrade nokogiri gem to version 1.6.6.4 or later.",
:aux_links=>[""]
})
self.safe_dependencies = [{:name=>"nokogiri", :version=>['1.6.6.4']}]
end
end
end
end
Version data entries
13 entries across 13 versions & 1 rubygems