PT-2021-7291 · Raptor+9 · Raptor+9

Published 2020-11-21 · Updated 2025-11-10 · CVE-2020-25713

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Raptor (affected versions not specified)

Description The issue is related to a malformed input file that can cause a segfault due to an out of bounds array access in the raptor xml writer start element common function. This is associated with a buffer overflow in memory, which can potentially allow a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-20

CWE-125

CWE-787

Related Identifiers

ALSA-2021:1842

ALT-PU-2023-8310

ALT-PU-2023-8311

ALT-PU-2023-8312

ALT-PU-2024-1165

BDU:2022-05307

CESA-2021_1842

CVE-2020-25713

DLA-2846-1

MGASA-2020-0431

OESA-2022-1796

OPENSUSE-SU-2022_2896-1

RHSA-2021:1842

RHSA-2021_1842

RLSA-2021:1842

SUSE-SU-2022:2895-1

SUSE-SU-2022:2896-1

SUSE-SU-2022_2895-1

SUSE-SU-2022_2896-1

USN-7316-1

USN-7868-1

USN-7869-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Raptor

Red Hat

Rocky Linux

Suse

Ubuntu

References · 56

• https://osv.dev/vulnerability/USN-7316-1 · Vendor Advisory
• https://bugs.librdf.org/mantis/view.php?id=650 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7868-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25713 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-1842.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-7869-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27EQ2JCVMKG3EYTBYO4642P773I2NYUV · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25713 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/SUIND56AOKEHHBE4OYV57M73LLOLJRLV · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUIND56AOKEHHBE4OYV57M73LLOLJRLV · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0431 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:1842 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/27EQ2JCVMKG3EYTBYO4642P773I2NYUV · Vendor Advisory