CVE-2018-14404 Nokogiri NULL Pointer Dereference
Attackers can cause a denial of service by crashing applications using libxml2 via invalid XPath expressions in XSL inputs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-14404?
CVE-2018-14404 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 19 Jul 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.
Weakness: CWE-476
Which versions are affected by CVE-2018-14404?
2 open source packages ship an affected version, including nokogiri. It affects 3 products.
| Package | Affected | Fixed in |
|---|---|---|
nokogiri RubyGems | All versions | 1.8.5 |
nokogiri RubyGems | All versions | 1.8.5 |
Linux distribution packages (6)
cockpit-ovirt Red Hat:enterprise_linux:7::hypervisor | All versions | 0:0.13.10-1.el7ev |
cockpit-ovirt-dashboard Red Hat:enterprise_linux:7::hypervisor | All versions | 0:0.13.10-1.el7ev |
redhat-release-virtualization-host Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3.9-2.el7ev |
redhat-virtualization-host Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3.9-20200324.0.el7_8 |
redhat-virtualization-host-image-update Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3.9-20200324.0.el7_8 |
redhat-virtualization-host-image-update-placeholder Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3.9-2.el7ev |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Xmlsoft Libxml2.
How do I fix CVE-2018-14404?
Upgrade nokogiri to 1.8.5 or later.
Is CVE-2018-14404 being exploited?
There is no known exploitation of CVE-2018-14404 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2018-14404, DEBIAN-CVE-2018-14404, ECHO-18bd-8270-c133, GHSA-6qvp-r6r3-9p7h, RHBA-2020:1310, UBUNTU-CVE-2018-14404.