PT-2022-4890 · Nokogiri+6 · Nokogiri+6

Oooooooo_Q · Published 2022-04-10 · Updated 2026-03-13 · CVE-2022-24836

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nokogiri versions prior to 1.13.4

Description The issue is related to an inefficient regular expression in the Nokogiri library, which can lead to excessive backtracking when detecting encoding in HTML documents. This can be exploited by a remote attacker to cause a denial of service. There are no known workarounds for this issue.

Recommendations Upgrade to Nokogiri version 1.13.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable regular expression function until a patch is available.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-1333

CWE-400

Related Identifiers

ALSA-2025_16880

ALT-PU-2022-2027

ALT-PU-2023-4266

ALT-PU-2024-7812

BDU:2022-06047

CVE-2022-24836

DLA-3003-1

DLA-3149-1

DLA-3868-1

GHSA-CRJR-9RC5-GHW8

MGASA-2022-0164

OESA-2022-1644

OPENSUSE-SU-2022_4015-1

OPENSUSE-SU-2022_4016-1

OPENSUSE-SU-2024:11999-1

OPENSUSE-SU-2024:13165-1

OPENSUSE-SU-2024:14174-1

OPENSUSE-SU-2025:14697-1

OPENSUSE-SU-2026:10356-1

RHSA-2022:8506

RLSA-2022:8506

SUSE-SU-2022:3890-1

SUSE-SU-2022:4015-1

SUSE-SU-2022:4016-1

SUSE-SU-2022_4015-1

SUSE-SU-2022_4016-1

Affected Products

Alt Linux

Astra Linux

Apple Macos

Nokogiri

Red Os

Rocky Linux

Suse

References · 385

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24836.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2022-24836.yml · Exploit
• https://github.com/sparklemotion/nokogiri/commit/e444525ef1634b675cd1cf52d39f4320ef0aecfd · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:14174-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24836 · Vendor Advisory
• https://security.gentoo.org/glsa/202208-29 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-24836 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1644 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/XMDCWRQXJQ3TFSETPCEFMQ6RR6ME5UA3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24836 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11999-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0164 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3003-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:8506 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13165-1 · Vendor Advisory