p PatchFirst

CVE-2017-18926

CVE-2017-18926

This page contains facts from public vulnerability sources. Check the original advisory before updating.

raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).

CVSS 7.1 · High · EPSS 3.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • raptor2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.0.14-1.1

    Update to 2.0.14-1.1

  • raptor2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.0.14-1.1

    Update to 2.0.14-1.1

  • raptor2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.0.14-1.1

    Update to 2.0.14-1.1

  • raptor2 Ubuntu:16.04:LTS

    Versions
    • 2.0.14-1
    Affected ranges
    • ECOSYSTEM: < 2.0.14-1ubuntu0.16.04.1

    Update to 2.0.14-1ubuntu0.16.04.1

  • raptor Ubuntu:Pro:16.04:LTS

    Versions
    • 1.4.21-11
    Affected ranges
    • ECOSYSTEM: < 1.4.21-11ubuntu0.1~esm1

    Update to 1.4.21-11ubuntu0.1~esm1

  • raptor2 Ubuntu:18.04:LTS

    Versions
    • 2.0.14-1build1
    Affected ranges
    • ECOSYSTEM: < 2.0.14-1ubuntu0.18.04.1

    Update to 2.0.14-1ubuntu0.18.04.1

  • raptor2 Ubuntu:20.04:LTS

    Versions
    • 2.0.15-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 2.0.15-0ubuntu1.20.04.1

    Update to 2.0.15-0ubuntu1.20.04.1

  • raptor2 Ubuntu:22.04:LTS

    Affected ranges
    • ECOSYSTEM: < 2.0.15-0ubuntu2

    Update to 2.0.15-0ubuntu2

Original sources

Check your server →