CVE-2024-58378

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-58378", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "REJECTED", "assignerShortName": "VulnCheck", "dateReserved": "2026-08-16T13:02:14.690Z", "datePublished": "2026-08-25T15:15:57.242Z", "dateUpdated": "2026-09-01T20:33:43.529Z", "dateRejected": "2026-09-01T20:33:43.529Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-09-01T20:33:43.529Z"}, "rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected as a duplicate."}], "replacedBy": ["CVE-2024-25062"]}}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-58378", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "REJECTED", "assignerShortName": "VulnCheck", "dateReserved": "2026-08-16T13:02:14.690Z", "datePublished": "2026-08-25T15:15:57.242Z", "dateUpdated": "2026-09-01T20:33:43.529Z", "dateRejected": "2026-09-01T20:33:43.529Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-09-01T20:33:43.529Z"}, "rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected as a duplicate."}], "replacedBy": ["CVE-2024-25062"]}}}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: This CVE ID has been rejected as a duplicate."}], "id": "CVE-2024-58378", "lastModified": "2026-10-27T23:10:00.153", "metrics": {}, "published": "2026-08-25T16:16:45.153", "references": [], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "rubygem-nokogiri: Nokogiri before 1.16.2 Use-After-Free via xmlTextReader", "id": "2523566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523566"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-416", "details": ["Nokogiri before 1.15.6 and 1.16.x before 1.16.2, when using bundled libxml2, is affected by the libxml2 flaw CVE-2024-25062."], "name": "CVE-2024-58378", "package_state": [{"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Under investigation", "package_name": "3scale-amp2/backend-rhel8", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Under investigation", "package_name": "3scale-amp2/system-rhel8", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Under investigation", "package_name": "3scale-amp2/system-rhel9", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Under investigation", "package_name": "3scale-amp2/toolbox-rhel9", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Under investigation", "package_name": "3scale-amp2/zync-rhel9", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "rubygem-nokogiri", "product_name": "Red Hat Satellite 6"}], "public_date": "2026-08-25T15:15:57Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-58378\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-58378\nhttps://github.com/sparklemotion/nokogiri/commit/92721970\nhttps://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xc9x-jj77-9p9j\nhttps://www.vulncheck.com/advisories/nokogiri-before-use-after-free-via-xmltextreader"], "statement": "This CVE does not represent a flaw in Nokogiri, but is rather a duplicate assignment for different CVEs affecting libxml2 or libxslt.\nThe rubygem-nokogiri packages as shipped in Red Hat products do not bundled libxml2 and libxslt, but rather use system packages of those libraries. This CVE is therefore not applicable to the rubygem-nokogiri packages provided by Red Hat.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.16.0,1.16.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.16.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.15.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.15.6"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "nokogiri", "vendor": "nokogiri"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.16.0,1.16.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.16.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "nokogiri", "source": "cna", "vendor": "sparklemotion"}, "product": "nokogiri", "vendor": "sparklemotion"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.15.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.15.6"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "nokogiri", "source": "cna", "vendor": "sparklemotion"}, "product": "nokogiri", "vendor": "sparklemotion"}], "created": "2026-08-25T16:30:06.096194+00:00", "updated": "2026-08-25T19:00:07.469841+00:00", "vendors": ["nokogiri", "nokogiri$PRODUCT$nokogiri", "sparklemotion", "sparklemotion$PRODUCT$nokogiri"]}