CVE-2015-1819
No CVSS score yet. EPSS 6.3% chance of exploitation in the next 30 days. Fixed in nokogiri 1.6.6.4.
The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
- EPSS
- 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:iphone_os
- apple:mac_os_x
- apple:tvos
- apple:watchos
- canonical:ubuntu_linux
- debian:debian_linux
- fedoraproject:fedora
- opensuse:opensuse
- oracle:linux
- oracle:solaris
- redhat:enterprise_linux
- xmlsoft:libxml
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-q7wx-62r7-j2x7 | RubyGems | nokogiri | >=1.6.6.0 <1.6.6.4 | 1.6.6.4 |
References
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172710.html