raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-raptor2alma-upgrade-raptor2-devel | May 4, 2022 | Nov 6, 2020 | |
| Alpine Linux | alpine-linux-upgrade-raptor2 | Jan 4, 2021 | Nov 6, 2020 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Nov 6, 2020 | |
| Centos_linux | — | centos-upgrade-raptor2centos-upgrade-raptor2-debuginfocentos-upgrade-raptor2-debugsource | Jun 1, 2021 | Nov 6, 2020 |
| Debian | debian-upgrade-raptor2 | Nov 9, 2020 | Nov 6, 2020 | |
| Freebsd | freebsd-upgrade-package-raptor2 | Dec 10, 2025 | Nov 9, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-raptor2oracle-linux-upgrade-raptor2-devel | Nov 23, 2022 | Jun 7, 2017 |
| Redhat_linux | redhat-upgrade-raptor2redhat-upgrade-raptor2-debuginforedhat-upgrade-raptor2-debugsourceredhat-upgrade-raptor2-devel | May 21, 2021 | Nov 6, 2020 | |
| Rocky_linux | rocky-upgrade-raptor2rocky-upgrade-raptor2-debuginforocky-upgrade-raptor2-debugsourcerocky-upgrade-raptor2-devel | Mar 12, 2024 | Nov 6, 2020 | |
| Suse | — | suse-upgrade-libraptor-develsuse-upgrade-libraptor2-0suse-upgrade-libraptor2-0-32bitsuse-upgrade-raptor | Aug 9, 2024 | Nov 6, 2020 |
| Ubuntu | ubuntu-pro-upgrade-libraptor1ubuntu-pro-upgrade-raptor-utilsubuntu-upgrade-libraptor2-0 | Mar 22, 2023 | Nov 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub