CVE-2022-29181: Improper Handling of Unexpected Data Type in Nokogiri
First published: Fri May 20 2022(Updated: )
### Summary Nokogiri `< v1.13.6` does not type-check all inputs into the XML and HTML4 SAX parsers. For CRuby users, this may allow specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory. ### Severity The Nokogiri maintainers have evaluated this as **High 8.2** (CVSS3.1). ### Mitigation CRuby users should upgrade to Nokogiri `>= 1.13.6`. JRuby users are not affected. ### Workarounds To avoid this vulnerability in affected applications, ensure the untrusted input is a `String` by calling `#to_s` or equivalent. ### Credit This vulnerability was responsibly reported by @agustingianni and the Github Security Lab.
Credit: security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nokogiri Nokogiri | <1.13.6 | |
| Apple macOS | >=13.0<13.1 | |
| rubygems/nokogiri | <1.13.6 | 1.13.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT213532 (Advisory)
- https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xh29-r2w5-wx8m
- https://nvd.nist.gov/vuln/detail/CVE-2022-29181
- https://github.com/sparklemotion/nokogiri/commit/db05ba9a1bd4b90aa6c76742cf6102a7c7297267
- https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.6
- https://securitylab.github.com/advisories/GHSL-2022-031_GHSL-2022-032_Nokogiri/
- https://security.gentoo.org/glsa/202208-29
- https://support.apple.com/kb/HT213532
- http://seclists.org/fulldisclosure/2022/Dec/23
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2022-29181.yml
- https://github.com/advisories/GHSA-xh29-r2w5-wx8m (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2022-42843
- CVE-2022-42858
- CVE-2022-42847
- CVE-2022-42865
- CVE-2022-42854
- CVE-2022-42853
- CVE-2022-42859
- CVE-2022-35252
- CVE-2022-32942
- CVE-2022-46720
- CVE-2022-46710
- CVE-2022-46693
- CVE-2022-42864
- CVE-2022-46690
- CVE-2022-46697
- CVE-2022-42837
- CVE-2022-46689
- CVE-2022-46701
- CVE-2022-42842
- CVE-2022-42861
- CVE-2022-42845
- CVE-2022-48618
- CVE-2022-42839
- CVE-2022-46716
- CVE-2022-46704
- CVE-2022-32943
- CVE-2022-42840
- CVE-2022-42855
- CVE-2022-42862
- CVE-2022-24836
- CVE-2022-29181
- CVE-2022-46695
- CVE-2022-46718
- CVE-2022-46703
- CVE-2022-42866
- CVE-2022-32919
- CVE-2022-46725
- CVE-2022-46705
- CVE-2022-42867
- CVE-2022-46691
- CVE-2022-46692
- CVE-2022-42852
- CVE-2022-46696
- CVE-2022-46700
- CVE-2022-46698
- CVE-2022-46699
- CVE-2022-42863
- CVE-2022-42856
- CVE-2022-42841
Frequently Asked Questions
What is CVE-2022-29181?
CVE-2022-29181 is a vulnerability in the Nokogiri library prior to version 1.13.6 that allows specially crafted inputs to cause illegal memory access errors or reads from unrelated memory.
What is the severity of CVE-2022-29181?
The severity of CVE-2022-29181 is high, with a severity score of 8.2.
Which software versions are affected by CVE-2022-29181?
The affected software versions are Nokogiri prior to version 1.13.6 and Apple macOS Ventura up to version 13.1.
How can I mitigate the risk of CVE-2022-29181?
To mitigate the risk of CVE-2022-29181, update Nokogiri to version 1.13.6 and Apple macOS Ventura to version 13.1.
Where can I find more information about CVE-2022-29181?
More information about CVE-2022-29181 can be found at the following references: [Apple Support](https://support.apple.com/en-us/HT213532), [GitHub Security Advisory](https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xh29-r2w5-wx8m), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2022-29181).
- collector/github-advisory-latest
- alias/GHSA-xh29-r2w5-wx8m
- alias/CVE-2022-29181
- collector/github-advisory
- collector/nvd-cve
- collector/nvd-index
- agent/weakness
- agent/type
- agent/author
- agent/softwarecombine
- agent/severity
- agent/references
- agent/remedy
- agent/description
- collector/apple-support
- source/Apple
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- package-manager/rubygems
- vendor/nokogiri
- canonical/nokogiri nokogiri
- vendor/apple
- canonical/apple macos
- version/apple macos/13.0
- canonical/apple macos ventura