CVE:CVE-2013-6461
CNNVD:CNNVD-201312-559
Nokogiri是一款用于解析Ruby中HTML和XML的开源软件库。
Nokogiri 1.5.x版本和1.6.x版本中存在安全漏洞。攻击者可利用该漏洞使得受影响应用程序消耗大量的内存，造成程序崩溃，导致拒绝服务。
solution:Upgrade nokogiri nokogiri to a higher version than 1.5.11,1.6.1,and avoid the version [1.5.0,1.5.11),[1.6.0,1.6.1); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade redhat cloudforms_management_engine to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat openstack to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade redhat satellite to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat subscription_asset_manager to a higher version than -; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0