CVE-2022-29181: GHSL-2022-031_GHSL-2022-032: Type confusion in Nokogiri leads to memory leak or DoS - CVE-2022-29181
Summary
Nokogiri < v1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers. For CRuby users, this may allow specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory.
Severity
The Nokogiri maintainers have evaluated this as High 8.2 (CVSS3.1).
Mitigation
CRuby users should upgrade to Nokogiri >= 1.13.6.
JRuby users are not affected.
Workarounds
To avoid this vulnerability in affected applications, ensure the untrusted input is a String by calling #tos or equivalent.
Credit
This vulnerability was responsibly reported by @agustingianni and the Github Security Lab.
Other sources
Accounts. This issue was addressed with improved data protection.
— Apple
AMD. A memory corruption issue was addressed with improved input validation.
— Apple
AMD. An out-of-bounds write issue was addressed with improved input validation.
— Apple
AppleMobileFileIntegrity. This issue was addressed by enabling hardened runtime.
— Apple
Bluetooth. The issue was addressed with improved memory handling.
— Apple
Credit
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2022-42843
- CVE-2022-42858
- CVE-2022-42847
- CVE-2022-42865
- CVE-2022-42854
- CVE-2022-42853
- CVE-2022-42859
- CVE-2022-35252
- CVE-2022-32942
- CVE-2022-46720
- CVE-2022-46710
- CVE-2022-46693
- CVE-2022-42864
- CVE-2022-46690
- CVE-2022-46697
- CVE-2022-42837
- CVE-2022-46689
- CVE-2022-46701
- CVE-2022-42842
- CVE-2022-42861
- CVE-2022-42845
- CVE-2022-48618
- CVE-2022-42839
- CVE-2022-46716
- CVE-2022-46704
- CVE-2022-32943
- CVE-2022-42840
- CVE-2022-42855
- CVE-2022-42862
- CVE-2022-24836
- CVE-2022-29181
- CVE-2022-46695
- CVE-2022-46718
- CVE-2022-46703
- CVE-2022-42866
- CVE-2022-32919
- CVE-2022-46725
- CVE-2022-46705
- CVE-2022-42867
- CVE-2022-46691
- CVE-2022-46692
- CVE-2022-42852
- CVE-2022-46696
- CVE-2022-46700
- CVE-2022-46698
- CVE-2022-46699
- CVE-2022-42863
- CVE-2022-42856
- CVE-2022-42841
- CVE-2022-43454
- CVE-2022-48610
Frequently Asked Questions
What is CVE-2022-29181?
CVE-2022-29181 is a vulnerability in the Nokogiri library prior to version 1.13.6 that allows specially crafted inputs to cause illegal memory access errors or reads from unrelated memory.
What is the severity of CVE-2022-29181?
The severity of CVE-2022-29181 is high, with a severity score of 8.2.
Which software versions are affected by CVE-2022-29181?
The affected software versions are Nokogiri prior to version 1.13.6 and Apple macOS Ventura up to version 13.1.
How can I mitigate the risk of CVE-2022-29181?
To mitigate the risk of CVE-2022-29181, update Nokogiri to version 1.13.6 and Apple macOS Ventura to version 13.1.
Where can I find more information about CVE-2022-29181?
More information about CVE-2022-29181 can be found at the following references: [Apple Support](https://support.apple.com/en-us/HT213532), [GitHub Security Advisory](https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xh29-r2w5-wx8m), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2022-29181).