CVE-2019-20007 An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer (...
MediumCVSS 6.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer (in some compilers). After this, the function ezxml_parse_str does not check whether the s variable is not NULL in ezxml.c, leading to a NULL pointer dereference and crash (segmentation fault).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/mapcache(Debian:12) | All versions | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.0-1 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.0-2 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.0-2.1~exp1 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.0-3 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.0-3~exp1 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.0-3~exp2 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.0-4 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.1-1 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.1-1~bpo12+1 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.1-2 | No fix listed |
| debian/mapcache(Debian:12) | = 1.14.1-3 | No fix listed |
| debian/mapcache(Debian:12) | = 1.16.0-1 | No fix listed |
| debian/mapcache(Debian:12) | = 1.16.0-1~bpo13+1 | No fix listed |
| debian/mapcache(Debian:13) | All versions | No fix listed |
| debian/mapcache(Debian:13) | = 1.14.1-3 | No fix listed |
| debian/mapcache(Debian:13) | = 1.16.0-1 | No fix listed |
| debian/mapcache(Debian:13) | = 1.16.0-1~bpo13+1 | No fix listed |
| debian/mapcache(Debian:14) | All versions | No fix listed |
| debian/mapcache(Debian:14) | = 1.14.1-3 | No fix listed |
| debian/mapcache(Debian:14) | = 1.16.0-1 | No fix listed |
| debian/mapcache(Debian:14) | = 1.16.0-1~bpo13+1 | No fix listed |
| debian/netcdf(Debian:12) | < 1:4.9.0-1 | 1:4.9.0-1 |
| debian/netcdf(Debian:13) | < 1:4.9.0-1 | 1:4.9.0-1 |
| debian/netcdf(Debian:14) | < 1:4.9.0-1 | 1:4.9.0-1 |
Show 52 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/netcdf-parallel(Debian:12) | < 1:4.9.0-1 | 1:4.9.0-1 |
| debian/netcdf-parallel(Debian:13) | < 1:4.9.0-1 | 1:4.9.0-1 |
| debian/netcdf-parallel(Debian:14) | < 1:4.9.0-1 | 1:4.9.0-1 |
| debian/scilab(Debian:12) | All versions | No fix listed |
| debian/scilab(Debian:12) | = 2024.0.0+dfsg-1 | No fix listed |
| debian/scilab(Debian:12) | = 2024.0.0+dfsg-2 | No fix listed |
| debian/scilab(Debian:12) | = 2024.0.0+dfsg-3 | No fix listed |
| debian/scilab(Debian:12) | = 2024.0.0+dfsg-4 | No fix listed |
| debian/scilab(Debian:12) | = 2024.0.0+dfsg-5 | No fix listed |
| debian/scilab(Debian:12) | = 2024.0.0+dfsg-6 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg-1 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg-2 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg-3 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg-4 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg-5 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg-6 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg-7 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg-8 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg1-1 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg1-2 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg1-3 | No fix listed |
| debian/scilab(Debian:12) | = 2024.1.0+dfsg1-4 | No fix listed |
| debian/scilab(Debian:12) | = 6.1.1+dfsg2-10 | No fix listed |
| debian/scilab(Debian:12) | = 6.1.1+dfsg2-6 | No fix listed |
| debian/scilab(Debian:12) | = 6.1.1+dfsg2-7 | No fix listed |
| debian/scilab(Debian:12) | = 6.1.1+dfsg2-7~exp0 | No fix listed |
| debian/scilab(Debian:12) | = 6.1.1+dfsg2-8 | No fix listed |
| debian/scilab(Debian:12) | = 6.1.1+dfsg2-9 | No fix listed |
| debian/scilab(Debian:13) | All versions | No fix listed |
| debian/scilab(Debian:13) | = 2024.1.0+dfsg-6 | No fix listed |
| debian/scilab(Debian:13) | = 2024.1.0+dfsg-6+deb13u1 | No fix listed |
| debian/scilab(Debian:13) | = 2024.1.0+dfsg-7 | No fix listed |
| debian/scilab(Debian:13) | = 2024.1.0+dfsg-8 | No fix listed |
| debian/scilab(Debian:13) | = 2024.1.0+dfsg1-1 | No fix listed |
| debian/scilab(Debian:13) | = 2024.1.0+dfsg1-2 | No fix listed |
| debian/scilab(Debian:13) | = 2024.1.0+dfsg1-3 | No fix listed |
| debian/scilab(Debian:13) | = 2024.1.0+dfsg1-4 | No fix listed |
| debian/scilab(Debian:14) | < 2024.1.0+dfsg1-1 | 2024.1.0+dfsg1-1 |
| debian/scilab(Debian:14) | = 2024.1.0+dfsg-6 | No fix listed |
| debian/scilab(Debian:14) | = 2024.1.0+dfsg-7 | No fix listed |
| debian/scilab(Debian:14) | = 2024.1.0+dfsg-8 | No fix listed |
| ezxml project ezxml | >= 0.8.2, <= 0.8.6 | No fix listed |
| ubuntu/mapcache(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/scilab(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/mapcache(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/scilab(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/mapcache(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/scilab(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/mapcache(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/netcdf(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/netcdf-parallel(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/scilab(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2019-20007 vendor-advisory
- sourceforge.net exploit third-party-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking