PT-2021-7864 · Ezxml+4 · Ezxml+4

Rc0R · Published 2021-04-16 · Updated 2022-04-19 · CVE-2021-31347

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ezXML version 0.8.6

Description The issue is related to incorrect memory handling by the ezxml parse str() function when parsing crafted XML files, which can lead to writing outside a memory region created by mmap. Additionally, the vulnerability is associated with blind XPath injection, allowing a remote attacker to cause a denial of service using a specially crafted XML file.

Recommendations For ezXML version 0.8.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the ezxml parse str() function until a patch is available. Restrict access to the libezxml.a library to minimize the risk of exploitation. Avoid using the ezxml parse str() function with untrusted XML files until the issue is resolved.

Exploit

Weakness Enumeration

CWE-91

Related Identifiers

BDU:2023-03830

CVE-2021-31347

DLA-2705-1

MGASA-2021-0580

OPENSUSE-SU-2021:1505-1

OPENSUSE-SU-2021:3804-1

OPENSUSE-SU-2021:3805-1

OPENSUSE-SU-2021:3815-1

OPENSUSE-SU-2021:3873-1

OPENSUSE-SU-2021_1505-1

OPENSUSE-SU-2021_3804-1

OPENSUSE-SU-2021_3805-1

OPENSUSE-SU-2021_3815-1

OPENSUSE-SU-2021_3873-1

SUSE-SU-2021:3804-1

SUSE-SU-2021:3805-1

SUSE-SU-2021:3815-1

SUSE-SU-2021:3873-1

USN-5061-1

Affected Products

Astra Linux

Debian

Suse

Ubuntu

Ezxml

References · 59

• 🔥 https://sourceforge.net/p/ezxml/bugs/27 · Exploit
• https://debian.org/lts/security/2021/dla-2705 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0907SE47 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3815-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0630SE17MD · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3804-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31347 · Security Note
• https://ubuntu.com/security/CVE-2021-30485 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-31347 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3805-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-31347 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:1505-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-31347 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-31347 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3804-1 · Vendor Advisory