PT-2020-6185 · Red Hat+7 · Raptor Rdf Syntax Library+8
Hanno Böck
·
Published
2020-11-06
·
Updated
2025-11-10
·
CVE-2017-18926
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
Raptor RDF Syntax Library version 2.0.15
Description
The issue is related to the
raptor xml writer start element common function in the Raptor RDF Syntax Library, which miscalculates the maximum number of nspace declarations for the XML writer. This can lead to heap-based buffer overflows, sometimes seen in the raptor qname format as xml function. The vulnerability can be exploited by a remote attacker to compromise data integrity or cause a denial of service.Recommendations
For Raptor RDF Syntax Library version 2.0.15, consider updating to a newer version that addresses the issue, as the current version has a miscalculation in the
raptor xml writer start element common function that can lead to heap-based buffer overflows.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Linuxmint
Raptor Rdf Syntax Library
Red Hat
Rocky Linux
Suse
Ubuntu