- Vulnerability/
- USN-4175-1
USN-4175-1: Nokogiri vulnerability
First published: Tue Nov 05 2019(Updated: )
It was discovered that Nokogiri incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/ruby-nokogiri | <1.10.3+dfsg1-2ubuntu0.1 | 1.10.3+dfsg1-2ubuntu0.1 |
| Ubuntu Ubuntu | =19.10 | |
| All of | ||
| ubuntu/ruby-nokogiri | <1.10.0+dfsg1-2ubuntu0.1 | 1.10.0+dfsg1-2ubuntu0.1 |
| Ubuntu Ubuntu | =19.04 | |
| All of | ||
| ubuntu/ruby-nokogiri | <1.8.2-1ubuntu0.1 | 1.8.2-1ubuntu0.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/ruby-nokogiri | <1.6.7.2-3ubuntu0.1 | 1.6.7.2-3ubuntu0.1 |
| Ubuntu Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-5477
- https://launchpad.net/ubuntu/+source/ruby-nokogiri/1.10.3+dfsg1-2ubuntu0.1
- https://launchpad.net/ubuntu/+source/ruby-nokogiri/1.10.0+dfsg1-2ubuntu0.1
- https://launchpad.net/ubuntu/+source/ruby-nokogiri/1.8.2-1ubuntu0.1
- https://launchpad.net/ubuntu/+source/ruby-nokogiri/1.6.7.2-3ubuntu0.1
- https://ubuntu.com/security/notices/USN-4175-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this Nokogiri vulnerability?
The vulnerability ID for this Nokogiri vulnerability is CVE-2019-5477.
What is the severity of the Nokogiri vulnerability?
The severity of the Nokogiri vulnerability is not specified in the provided information.
How can a remote attacker exploit the Nokogiri vulnerability?
A remote attacker can exploit the Nokogiri vulnerability by using it to execute arbitrary OS commands.
Which versions of Ruby Nokogiri are affected by this vulnerability?
The versions of Ruby Nokogiri affected by this vulnerability are 1.10.3+dfsg1-2ubuntu0.1, 1.10.0+dfsg1-2ubuntu0.1, 1.8.2-1ubuntu0.1, and 1.6.7.2-3ubuntu0.1.
How can I fix the Nokogiri vulnerability?
To fix the Nokogiri vulnerability, update the package 'ruby-nokogiri' to the specified remedial versions provided in the references.
- agent/references
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/event
- agent/softwarecombine
- agent/tags
- agent/description
- agent/title
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.10
- version/ubuntu ubuntu/19.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04