CVE-2022-24836

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Nokogiri/Nokogiri

  cpe:2.3:a:nokogiri:nokogiri:*:*:*:*:*:ruby:*:*

  Range: <1.13.4
• Apple Inc./macOS

  cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

  Range: >=13.0,<13.1
• Debian/linux2 versions

  cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
• Fedoraproject/Fedora3 versions

  cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
• ghsa-coords12 versions

  pkg:gem/nokogiripkg:rpm/opensuse/ruby3.2-rubygem-nokogiri&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/rubygem-nokogiri&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/rubygem-nokogiri&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/rubygem-nokogiri&distro=openSUSE%20Tumbleweedpkg:rpm/suse/rubygem-nokogiri&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015pkg:rpm/suse/rubygem-nokogiri&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP1pkg:rpm/suse/rubygem-nokogiri&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2pkg:rpm/suse/rubygem-nokogiri&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/rubygem-nokogiri&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/rubygem-nokogiri&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/rubygem-nokogiri&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

  < 1.13.4+ 11 more

  • (no CPE)range: < 1.13.4
  • (no CPE)range: < 1.13.9-1.7
  • (no CPE)range: < 1.8.5-150000.3.9.1
  • (no CPE)range: < 1.8.5-150400.14.3.1
  • (no CPE)range: < 1.13.4-1.1
  • (no CPE)range: < 1.8.5-150000.3.9.1
  • (no CPE)range: < 1.8.5-150000.3.9.1
  • (no CPE)range: < 1.8.5-150000.3.9.1
  • (no CPE)range: < 1.8.5-150000.3.9.1
  • (no CPE)range: < 1.8.5-150400.14.3.1
  • (no CPE)range: < 1.6.1-5.6.1
  • (no CPE)range: < 1.6.1-5.6.1
• Sparklemotion/Nokogiricpe-rescue

  Range: < 1.13.4

• github.com/sparklemotion/nokogiri/commit/e444525ef1634b675cd1cf52d39f4320ef0aecfdnvdPatchThird Party AdvisoryWEB
• seclists.org/fulldisclosure/2022/Dec/23nvdMailing ListThird Party AdvisoryWEB
• github.com/advisories/GHSA-crjr-9rc5-ghw8ghsaADVISORY
• github.com/sparklemotion/nokogiri/security/advisories/GHSA-crjr-9rc5-ghw8nvdThird Party AdvisoryWEB
• lists.debian.org/debian-lts-announce/2022/05/msg00013.htmlnvdMailing ListThird Party AdvisoryWEB
• lists.debian.org/debian-lts-announce/2022/10/msg00018.htmlnvdMailing ListThird Party AdvisoryWEB
• nvd.nist.gov/vuln/detail/CVE-2022-24836ghsaADVISORY
• security.gentoo.org/glsa/202208-29nvdThird Party AdvisoryWEB
• support.apple.com/kb/HT213532nvdThird Party AdvisoryWEB
• github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2022-24836.ymlghsaWEB
• github.com/sparklemotion/nokogiri/releases/tag/v1.13.4ghsaWEB
• groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJghsaWEB
• lists.fedoraproject.org/archives/list/[email protected]/message/6DHCOWMA5PQTIQIMDENA7R2Y5BDYAIYMghsaWEB
• lists.fedoraproject.org/archives/list/[email protected]/message/OUPLBUZVM4WPFSXBEP2JS3R6LMKRTLFCghsaWEB
• lists.fedoraproject.org/archives/list/[email protected]/message/XMDCWRQXJQ3TFSETPCEFMQ6RR6ME5UA3ghsaWEB
• lists.debian.org/debian-lts-announce/2024/09/msg00010.htmlnvd
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DHCOWMA5PQTIQIMDENA7R2Y5BDYAIYM/nvd
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OUPLBUZVM4WPFSXBEP2JS3R6LMKRTLFC/nvd
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMDCWRQXJQ3TFSETPCEFMQ6RR6ME5UA3/nvd

No linked articles in our index yet.