Vulnerabilities > CVE-2022-29181 - Improper Handling of Unexpected Data Type vulnerability in multiple products

CVSS 8.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

nokogiri

apple

CWE-241

NVD

Published: 2022-05-20

Updated: 2023-02-16

Summary

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory. Version 1.13.6 contains a patch for this issue. As a workaround, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.

Vulnerable Configurations

Part	Description	Count
Application	Nokogiri Nokogiri Nokogiri - Nokogiri Nokogiri 1.0.0 Nokogiri Nokogiri 1.0.1 Nokogiri Nokogiri 1.0.2 Nokogiri Nokogiri 1.0.3 Nokogiri Nokogiri 1.0.4 Nokogiri Nokogiri 1.0.5 Nokogiri Nokogiri 1.0.6 Nokogiri Nokogiri 1.0.7 Nokogiri Nokogiri 1.1.0 Nokogiri Nokogiri 1.1.1 Nokogiri Nokogiri 1.2.0 Nokogiri Nokogiri 1.2.1 Nokogiri Nokogiri 1.2.2 Nokogiri Nokogiri 1.2.3 Nokogiri Nokogiri 1.3.0 Nokogiri Nokogiri 1.3.1 Nokogiri Nokogiri 1.3.2 Nokogiri Nokogiri 1.3.3 Nokogiri Nokogiri 1.4.0 Nokogiri Nokogiri 1.4.1 Nokogiri Nokogiri 1.4.2 Nokogiri Nokogiri 1.4.3 Nokogiri Nokogiri 1.4.3.1 Nokogiri Nokogiri 1.4.4 Nokogiri Nokogiri 1.4.4.1 Nokogiri Nokogiri 1.4.4.2 Nokogiri Nokogiri 1.4.5 Nokogiri Nokogiri 1.4.6 Nokogiri Nokogiri 1.4.7 Nokogiri Nokogiri 1.5.0 Nokogiri Nokogiri 1.5.1 Nokogiri Nokogiri 1.5.2 Nokogiri Nokogiri 1.5.3 Nokogiri Nokogiri 1.5.4 Nokogiri Nokogiri 1.5.5 Nokogiri Nokogiri 1.5.6 Nokogiri Nokogiri 1.5.7 Nokogiri Nokogiri 1.5.8 Nokogiri Nokogiri 1.5.9 Nokogiri Nokogiri 1.5.10 Nokogiri Nokogiri 1.5.11 Nokogiri Nokogiri 1.6.0 Nokogiri Nokogiri 1.6.1 Nokogiri Nokogiri 1.6.2 Nokogiri Nokogiri 1.6.2.1 Nokogiri Nokogiri 1.6.3 Nokogiri Nokogiri 1.6.3.1 Nokogiri Nokogiri 1.6.4 Nokogiri Nokogiri 1.6.4.1 Nokogiri Nokogiri 1.6.5 Nokogiri Nokogiri 1.6.6 Nokogiri Nokogiri 1.6.6.1 Nokogiri Nokogiri 1.6.6.2 Nokogiri Nokogiri 1.6.6.3 Nokogiri Nokogiri 1.6.6.4 Nokogiri Nokogiri 1.6.7 Nokogiri Nokogiri 1.6.7.1 Nokogiri Nokogiri 1.6.7.2 Nokogiri Nokogiri 1.6.8 Nokogiri Nokogiri 1.6.8.1 Nokogiri Nokogiri 1.7.0 Nokogiri Nokogiri 1.7.0.1 Nokogiri Nokogiri 1.7.1 Nokogiri Nokogiri 1.7.2 Nokogiri Nokogiri 1.8.0 Nokogiri Nokogiri 1.8.1 Nokogiri Nokogiri 1.8.2 Nokogiri Nokogiri 1.8.3 Nokogiri Nokogiri 1.8.4 Nokogiri Nokogiri 1.8.5 Nokogiri Nokogiri 1.9.0 Nokogiri Nokogiri 1.9.1 Nokogiri Nokogiri 1.10.0 Nokogiri Nokogiri 1.10.1 Nokogiri Nokogiri 1.10.2 Nokogiri Nokogiri 1.10.3 Nokogiri Nokogiri 1.10.4 Nokogiri Nokogiri 1.10.5 Nokogiri Nokogiri 1.10.6 Nokogiri Nokogiri 1.10.7 Nokogiri Nokogiri 1.10.8 Nokogiri Nokogiri 1.10.9 Nokogiri Nokogiri 1.10.10 Nokogiri Nokogiri 1.11.0 Nokogiri Nokogiri 1.11.1 Nokogiri Nokogiri 1.11.2 Nokogiri Nokogiri 1.11.3 Nokogiri Nokogiri 1.11.4 Nokogiri Nokogiri 1.11.5 Nokogiri Nokogiri 1.11.6 Nokogiri Nokogiri 1.11.7 Nokogiri Nokogiri 1.12.0 Nokogiri Nokogiri 1.12.1 Nokogiri Nokogiri 1.12.2 Nokogiri Nokogiri 1.12.3 Nokogiri Nokogiri 1.12.4 Nokogiri Nokogiri 1.12.5 Nokogiri Nokogiri 1.13.0 Nokogiri Nokogiri 1.13.1 Nokogiri Nokogiri 1.13.2 Nokogiri Nokogiri 1.13.3 Nokogiri Nokogiri 1.13.4 Nokogiri Nokogiri 1.13.5	152
OS	Apple Apple Macos 13.0 Apple Macos 13.0.1	2

Common Weakness Enumeration (CWE)

CWE-241 - Improper Handling of Unexpected Data Type

Common Attack Pattern Enumeration and Classification (CAPEC)

Passing Local Filenames to Functions That Expect a URL
This attack relies on client side code to access local files and resources instead of URLs. When the client browser is expecting a URL string, but instead receives a request for a local file, that execution is likely to occur in the browser process space with the browser's authority to local files. The attacker can send the results of this request to the local files out to a site that they control. This attack may be used to steal sensitive authentication data (either local or remote), or to gain system profile information to launch further attacks.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References