Incorrect Regular Expression in Nokogiri - CVE-2022-24836

Vulnerability identifier: #VU64190

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-24836

CWE-ID: CWE-185

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to usage of an incorrect regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. A remote attacker can bypass implemented restrictions.

Nokogiri
Gentoo Linux
Amazon Linux AMI
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Enterprise Storage
Fedora
SUSE OpenStack Cloud Crowbar
macOS
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Server
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
openEuler
Red Hat Satellite
rubygem-nokogiri
ruby2.1-rubygem-nokogiri-debuginfo
rubygem-nokogiri-debugsource
ruby2.1-rubygem-nokogiri
ruby2.5-rubygem-nokogiri
ruby2.5-rubygem-nokogiri-debuginfo
ruby2.5-rubygem-nokogiri-doc
ruby2.5-rubygem-nokogiri-testsuite
rubygem-nokogiri-debuginfo
rubygem-nokogiri-doc
dev-ruby/nokogiri

Install updates from vendor's website.

Nokogiri - update to 1.13.4
macOS - update to 13.1 22C65
rubygem-nokogiri - addressed in versions 1.6.1-1.el7.2, 1.11.7-2.fc34, 1.13.1-2.fc35, 1.13.4-1.fc36, 1.13.6-1.el9
ruby2.1-rubygem-nokogiri-debuginfo - update to 1.6.1-5.6.1
rubygem-nokogiri-debugsource - addressed in versions 1.6.1-5.6.1, 1.8.5-150000.3.9.1, 1.8.5-150400.14.3.1
ruby2.1-rubygem-nokogiri - update to 1.6.1-5.6.1
ruby2.5-rubygem-nokogiri - addressed in versions 1.8.5-150000.3.9.1, 1.8.5-150400.14.3.1
ruby2.5-rubygem-nokogiri-debuginfo - addressed in versions 1.8.5-150000.3.9.1, 1.8.5-150400.14.3.1
ruby2.5-rubygem-nokogiri-doc - addressed in versions 1.8.5-150000.3.9.1, 1.8.5-150400.14.3.1
ruby2.5-rubygem-nokogiri-testsuite - addressed in versions 1.8.5-150000.3.9.1, 1.8.5-150400.14.3.1
rubygem-nokogiri - update to 1.10.5-4
rubygem-nokogiri-debuginfo - update to 1.10.5-4
rubygem-nokogiri-debugsource - update to 1.10.5-4
rubygem-nokogiri-doc - update to 1.10.5-4
dev-ruby/nokogiri - update to 1.13.6

• https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-crjr-9rc5-ghw8
• https://github.com/sparklemotion/nokogiri/commit/e444525ef1634b675cd1cf52d39f4320ef0aecfd
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XMDCWRQXJQ3TFSETPCEFMQ6RR6ME5UA3/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OUPLBUZVM4WPFSXBEP2JS3R6LMKRTLFC/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DHCOWMA5PQTIQIMDENA7R2Y5BDYAIYM/
• https://lists.debian.org/debian-lts-announce/2022/05/msg00013.html

• Security restrictions bypass in Nokogiri
• Amazon Linux AMI update for rubygem-nokogiri and rubygem18-nokogiri
• Multiple vulnerabilities in Red Hat Satellite 6.12
• SUSE update for rubygem-nokogiri
• SUSE update for rubygem-nokogiri
• SUSE update for rubygem-nokogiri
• Multiple vulnerabilities in macOS Ventura
• openEuler update for rubygem-nokogiri
• Fedora 36 update for rubygem-nokogiri
• Fedora 35 update for rubygem-nokogiri
• Fedora 34 update for rubygem-nokogiri
• Fedora EPEL 7 update for rubygem-nokogiri
• Fedora EPEL 9 update for rubygem-nokogiri
• Gentoo update for Nokogiri