CVE-2017-18926 raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflo...
HighCVSS 7.1
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/raptor2(Ubuntu:22.04) | < 2.0.15-0ubuntu2 | 2.0.15-0ubuntu2 |
| debian/raptor2(Debian:12) | < 2.0.14-1.1 | 2.0.14-1.1 |
| debian/raptor2(Debian:13) | < 2.0.14-1.1 | 2.0.14-1.1 |
| debian/raptor2(Debian:14) | < 2.0.14-1.1 | 2.0.14-1.1 |
| librdf raptor rdf syntax library | = 2.0.15 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| debian linux | = 10.0 | No fix listed |
| fedoraproject fedora | = 31 | No fix listed |
| fedoraproject fedora | = 32 | No fix listed |
| fedoraproject fedora | = 33 | No fix listed |
| alpine/raptor2(Alpine:v3.12) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.13) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.14) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.15) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.16) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.17) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.18) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.19) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.20) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.21) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.22) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.23) | < 2.0.15-r2 | 2.0.15-r2 |
| alpine/raptor2(Alpine:v3.24) | < 2.0.15-r2 | 2.0.15-r2 |
References
- Ubuntu CVE tracker vendor-advisory
- USN-4630-1 vendor-advisory
- USN-7868-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2017-18926 vendor-advisory
- [oss-security] 20201113 Buffer Overflow in raptor widely unfixed in Linux distros mailing-list third-party-advisory
- [oss-security] 20201113 Re: Buffer Overflow in raptor widely unfixed in Linux distros mailing-list third-party-advisory
- [oss-security] 20201114 Re: Buffer Overflow in raptor widely unfixed in Linux distros mailing-list third-party-advisory
- [oss-security] 20201116 Re: Buffer Overflow in raptor widely unfixed in Linux distros mailing-list third-party-advisory
- [oss-security] 20201116 Re: Buffer Overflow in raptor widely unfixed in Linux distros mailing-list third-party-advisory
- github.com patch third-party-advisory
- [debian-lts-announce] 20201107 [SECURITY] [DLA 2438-1] raptor2 security update mailing-list third-party-advisory
- FEDORA-2020-b15dd44972 vendor-advisory
- FEDORA-2020-d6675a61f1 vendor-advisory
- FEDORA-2020-3c1e69f1b1 vendor-advisory
- DSA-4785 third-party-advisory vendor-advisory
- www.openwall.com exploit mailing-list patch third-party-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking