CVE-2017-18926
High
Description
raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
SeverityHigh
CVSS7.1
Exploit probability—
Product
Librdf Raptor Rdf Syntax Library
PublishedNov 6, 2020
First seenNov 6, 2020
How to fix
Vendor advisories
- debian.org/security/2020/dsa-4785
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD67AVORGQXORPWNYYUHCH6YPPT6CI4O/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVHFYQDMVEBICIL4DBAGRRLPUR4QYWMV/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDZRNM45VPTQF2BKRWG4YRCHJGQ2L7NS/
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| librdf raptor_rdf_syntax_library | 2.0.15 | — |
| debian debian_linux | 9.0, 10.0 | — |
| fedoraproject fedora | 31, 32, 33 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.