CVE-2017-18926

Katalog CVE

CVSS 7.1 · High EPSS 3,1%

Kerentanan Out-of-bounds Write pada librdf raptor rdf syntax library, debian linux +1 lainnya. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).

Rincian

Terbit di NVD

6 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/LibreOffice/core/blob/master/external/redland/raptor/0001-Calcualte-max-nspace-declarations... patch · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2017/06/07/1 exploit · mailing list · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2020/11/13/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2020/11/13/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2020/11/14/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2020/11/16/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2020/11/16/3 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/11/msg00012.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2020/dsa-4785 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD67AVORGQXOR...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVHFYQDMVEBIC...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDZRNM45VPTQF...