PT-2025-3588 · Unknown+6 · Raptor Rdf Syntax Library+6

Pedro Ribeiro · Published 2024-03-28 · Updated 2025-11-10 · CVE-2024-57822

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Raptor RDF Syntax Library versions 2.0.16 and earlier

Description A heap-based buffer over-read issue occurs when parsing triples with the nquads parser in the raptor ntriples parse term internal() function. This issue affects the Raptor RDF Syntax Library.

Recommendations For versions 2.0.16 and earlier, consider disabling the raptor ntriples parse term internal() function until a patch is available to prevent exploitation of the heap-based buffer over-read vulnerability.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2025-12933

AZL-55475

AZL-55478

BDU:2025-11887

CVE-2024-57822

DLA-4343-1

OESA-2025-1887

OPENSUSE-SU-2025:15334-1

SUSE-SU-2025:03244-1

SUSE-SU-2025:03257-1

SUSE-SU-2025_03244-1

SUSE-SU-2025_03257-1

USN-7316-1

USN-7869-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Raptor Rdf Syntax Library

Suse

Ubuntu

References · 45

• 🔥 https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md · Exploit
• 🔥 https://github.com/dajobe/raptor/issues/70 · Exploit
• 🔥 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896 · Exploit
• https://osv.dev/vulnerability/CVE-2024-57822 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03244-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1887 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4343-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15334-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-57822 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-57822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57823 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-57822 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7316-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03257-1 · Vendor Advisory