{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-41946", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-07-24T16:51:40.948Z", "datePublished": "2024-08-01T14:22:14.014Z", "dateUpdated": "2024-08-01T15:50:11.993Z"}, "containers": {"cna": {"title": "REXML DoS vulnerability", "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "lang": "en", "description": "CWE-400: Uncontrolled Resource Consumption", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4"}, {"name": "https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368", "tags": ["x_refsource_MISC"], "url": "https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368"}, {"name": "https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml", "tags": ["x_refsource_MISC"], "url": "https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml"}, {"name": "https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946", "tags": ["x_refsource_MISC"], "url": "https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946"}], "affected": [{"vendor": "ruby", "product": "rexml", "versions": [{"version": "< 3.3.3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-08-01T14:22:14.014Z"}, "descriptions": [{"lang": "en", "value": "REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability."}], "source": {"advisory": "GHSA-5866-49gr-22v4", "discovery": "UNKNOWN"}}, "adp": [{"affected": [{"vendor": "ruby-lang", "product": "rexml", "cpes": ["cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "3.3.3", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-01T15:45:10.507112Z", "id": "CVE-2024-41946", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-01T15:50:11.993Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-41946", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-01T15:45:10.507112Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*"], "vendor": "ruby-lang", "product": "rexml", "versions": [{"status": "affected", "version": "0", "lessThan": "3.3.3", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-01T15:46:03.129Z"}}], "cna": {"title": "REXML DoS vulnerability", "source": {"advisory": "GHSA-5866-49gr-22v4", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "ruby", "product": "rexml", "versions": [{"status": "affected", "version": "< 3.3.3"}]}], "references": [{"url": "https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4", "name": "https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368", "name": "https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368", "tags": ["x_refsource_MISC"]}, {"url": "https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml", "name": "https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml", "tags": ["x_refsource_MISC"]}, {"url": "https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946", "name": "https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "CWE-400: Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-08-01T14:22:14.014Z"}}}, "cveMetadata": {"cveId": "CVE-2024-41946", "state": "PUBLISHED", "dateUpdated": "2024-08-01T15:50:11.993Z", "dateReserved": "2024-07-24T16:51:40.948Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-08-01T14:22:14.014Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*", "matchCriteriaId": "E5CFEABA-B7D5-4D35-9C56-CC81B839DD36", "versionEndExcluding": "3.3.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability."}, {"lang": "es", "value": "REXML es un conjunto de herramientas XML para Ruby. La gema REXML 3.3.2 tiene una vulnerabilidad DoS cuando analiza un XML que tiene muchas expansiones de entidad con SAX2 o API de analizador de extracci\u00f3n. La gema REXML 3.3.3 o posterior incluye el parche para corregir la vulnerabilidad."}], "id": "CVE-2024-41946", "lastModified": "2024-09-05T16:09:45.503", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2024-08-01T15:15:14.100", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4"}, {"source": "security-advisories@github.com", "tags": ["Not Applicable"], "url": "https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-400"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2024:6784", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "ruby:3.3-8100020240906074654.489197e6", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-09-18T00:00:00Z"}, {"advisory": "RHSA-2024:6670", "cpe": "cpe:/a:redhat:enterprise_linux:8::highavailability", "package": "pcs-0:0.10.18-2.el8_10.2", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-09-16T00:00:00Z"}, {"advisory": "RHSA-2024:6702", "cpe": "cpe:/a:redhat:rhel_tus:8.6::highavailability", "package": "pcs-0:0.10.12-6.el8_6.6", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2024-09-16T00:00:00Z"}, {"advisory": "RHSA-2024:6702", "cpe": "cpe:/a:redhat:rhel_e4s:8.6::highavailability", "package": "pcs-0:0.10.12-6.el8_6.6", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2024-09-16T00:00:00Z"}, {"advisory": "RHSA-2024:6703", "cpe": "cpe:/a:redhat:rhel_eus:8.8::highavailability", "package": "pcs-0:0.10.15-4.el8_8.3", "product_name": "Red Hat Enterprise Linux 8.8 Extended Update Support", "release_date": "2024-09-16T00:00:00Z"}, {"advisory": "RHSA-2024:6785", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "ruby:3.3-9040020240906110954.9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-09-18T00:00:00Z"}], "bugzilla": {"description": "rexml: DoS vulnerability in REXML", "id": "2302272", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302272"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "status": "verified"}, "cwe": "CWE-400", "details": ["REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability.", "A flaw was found in the REXML package. Reading an XML file that contains many entity expansions may lead to a denial of service due to resource starvation. An attacker can use this flaw to trick a user into processing an untrusted XML file."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2024-41946", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "ruby:2.5/ruby", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "ruby:3.1/ruby", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "pcs", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "ruby:3.0/ruby", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "ruby:3.1/ruby", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openstack:16.1", "fix_state": "Fix deferred", "package_name": "puppet-datacat", "product_name": "Red Hat OpenStack Platform 16.1"}, {"cpe": "cpe:/a:redhat:openstack:16.1", "fix_state": "Fix deferred", "package_name": "puppet-etcd", "product_name": "Red Hat OpenStack Platform 16.1"}, {"cpe": "cpe:/a:redhat:openstack:16.1", "fix_state": "Out of support scope", "package_name": "puppet-opendaylight", "product_name": "Red Hat OpenStack Platform 16.1"}, {"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Not affected", "package_name": "puppet-datacat", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Not affected", "package_name": "puppet-etcd", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Not affected", "package_name": "puppet-opendaylight", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:openstack:17.1", "fix_state": "Not affected", "package_name": "puppet-etcd", "product_name": "Red Hat OpenStack Platform 17.1"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Fix deferred", "package_name": "foreman", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Fix deferred", "package_name": "foreman-proxy", "product_name": "Red Hat Satellite 6"}], "public_date": "2024-08-01T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-41946\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-41946\nhttps://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368\nhttps://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4\nhttps://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml\nhttps://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946"], "threat_severity": "Low"}