raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade raptor2Upgrade raptor2-devel | May 4, 2022 | Nov 6, 2020 |
| Alpine Linux | — | Upgrade raptor2 | Jan 4, 2021 | Nov 6, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 6, 2020 |
| Centos_linux | — | Upgrade raptor2-debugsourceUpgrade raptor2Upgrade raptor2-debuginfo | Jun 1, 2021 | Nov 6, 2020 |
| Debian | — | Upgrade raptor2 | Nov 9, 2020 | Nov 6, 2020 |
| Freebsd | — | Upgrade raptor2 | Dec 10, 2025 | Nov 9, 2020 |
| Oracle_linux | — | Upgrade raptor2Upgrade raptor2-devel | Nov 23, 2022 | Jun 7, 2017 |
| Redhat_linux | — | Upgrade raptor2-develUpgrade raptor2Upgrade raptor2-debugsourceUpgrade raptor2-debuginfoNo solution exists | May 21, 2021 | Nov 6, 2020 |
| Rocky_linux | — | Upgrade raptor2-debugsourceUpgrade raptor2-debuginfoUpgrade raptor2Upgrade raptor2-devel | Mar 12, 2024 | Nov 6, 2020 |
| Suse | — | Upgrade libraptor2-0-32bitUpgrade libraptor2-0Upgrade libraptor-develUpgrade raptor | Aug 9, 2024 | Nov 6, 2020 |
| Ubuntu | — | Upgrade raptor-utils (Ubuntu Pro)Upgrade libraptor2-0Upgrade libraptor1 (Ubuntu Pro) | Mar 22, 2023 | Nov 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub