| Package | Affected versions | Patched versions |
|---|---|---|
| nokogiri | < 1.10.8 | 1.10.8 |
| communications cloud native core network function cloud native environment | = 1.10.0 | |
| enterprise manager base platform | = 13.4.0.0= 13.5.0.0 | |
| enterprise manager ops center | = 12.4.0.0 | |
| mysql workbench | ≤ 8.0.26 | |
| peoplesoft enterprise peopletools | = 8.58 | |
| real user experience insight | = 13.3.1.0= 13.4.1.0= 13.5.1.0 | |
| sinema remote connect server | < 3.0 | 3.0 |
| libxml2 | = 2.9.10 |
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. The Nokogiri RubyGem has patched its vendored copy of libxml2 in order to prevent this issue from affecting nokogiri.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free