raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade raptor2-develUpgrade raptor2 | May 4, 2022 | Nov 6, 2020 |
| Alpine Linux | — | Upgrade raptor2 | Jan 4, 2021 | Nov 6, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2020 |
| Centos_linux | — | Upgrade raptor2-debuginfoUpgrade raptor2Upgrade raptor2-debugsource | Jun 1, 2021 | Nov 6, 2020 |
| Debian | — | Upgrade raptor2 | Nov 9, 2020 | Nov 6, 2020 |
| Freebsd | — | Upgrade raptor2 | Dec 10, 2025 | Nov 9, 2020 |
| Oracle_linux | — | Upgrade raptor2-develUpgrade raptor2 | Nov 23, 2022 | Jun 7, 2017 |
| Redhat_linux | — | No solution existsUpgrade raptor2Upgrade raptor2-debuginfoUpgrade raptor2-develUpgrade raptor2-debugsource | May 21, 2021 | Nov 6, 2020 |
| Rocky_linux | — | Upgrade raptor2-develUpgrade raptor2-debuginfoUpgrade raptor2Upgrade raptor2-debugsource | Mar 12, 2024 | Nov 6, 2020 |
| Suse | — | Upgrade libraptor2-0-32bitUpgrade libraptor-develUpgrade libraptor2-0Upgrade raptor | Aug 9, 2024 | Nov 6, 2020 |
| Ubuntu | — | Upgrade libraptor1 (Ubuntu Pro)Upgrade raptor-utils (Ubuntu Pro)Upgrade libraptor2-0 | Mar 22, 2023 | Nov 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub