Fedora Account System
Red Hat Associate
Red Hat Customer
Nokogiri before 1.14.3 (CRuby implementation only, when using the packaged libxml2) bundles libxml2 v2.10.3, which is vulnerable to NULL pointer dereferences in XML Schema processing (xmlSchemaFixupComplexType, CVE-2023-28484, and xmlSchemaCheckCOSSTDerivedOK). An attacker who supplies a crafted/malformed XML schema can cause libxml2 to dereference a NULL pointer and potentially segfault, resulting in a denial of service. Nokogiri 1.14.3 upgrades the packaged libxml2 to v2.10.4 to resolve these issues.
* Lowering CVSS score justification * - Trigger requires processing attacker-supplied XML Schema (XSD) via Nokogiri::XML::Schema - a code path rarely exposed in 3scale, Satellite, OCM acceptance tests or RHEL admin tooling, which primarily parse HTML/XML documents. - Impact is already DoS-only (NULL pointer dereference → crash); no C/I. - AC:H is warranted because exploitation depends on the application exposing schema validation to untrusted input - not default Nokogiri usage. - RHEL rubygem-nokogiri RPM builds with NOKOGIRI_USE_SYSTEM_LIBRARIES=yes (system libxml2, not bundled), further limiting exposure for RPM-based deployments.