An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr() starting with a pointer after a '\0' character (where the processing of a string was finished).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade netcdfUpgrade netcdf-parallel | Jul 30, 2024 | Dec 26, 2019 |
| Suse | — | Upgrade libnetcdf_4_7_4-gnu-hpcUpgrade libnetcdf-gnu-openmpi4-hpcUpgrade libnetcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticUpgrade netcdfUpgrade netcdf-gnu-openmpi4-hpc-develUpgrade libnetcdf18-openmpi3Upgrade libnetcdf13-32bitUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-develUpgrade netcdf-gnu-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpcUpgrade netcdf-openmpi2-devel-staticUpgrade libnetcdf18-openmpi4-32bitUpgrade libnetcdf-gnu-openmpi3-hpcUpgrade libnetcdf13Upgrade netcdf_4_7_4-gnu-openmpi4-hpc-develUpgrade netcdf_4_7_3-gnu-hpc-devel-staticUpgrade libnetcdf18-openmpi3-32bitUpgrade netcdf_4_6_1-gnu-mpich-hpc-develUpgrade libnetcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf-gnu-openmpi2-hpcUpgrade libnetcdf18Upgrade libnetcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf-openmpi2-develUpgrade netcdf-openmpi3-devel-staticUpgrade libnetcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf-develUpgrade netcdf-gnu-mpich-hpc-develUpgrade netcdf-gnu-openmpi4-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-develUpgrade netcdf-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpcUpgrade libnetcdf_4_7_3-gnu-openmpi2-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf-gnu-mvapich2-hpc-develUpgrade netcdf_4_6_1-gnu-mpich-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpcUpgrade libnetcdf-gnu-mvapich2-hpcUpgrade libnetcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticUpgrade libnetcdf_4_7_3-gnu-mvapich2-hpcUpgrade libnetcdf18-32bitUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-hpc-devel-dataUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-develUpgrade netcdf-openmpi4-devel-staticUpgrade netcdf-gnu-openmpi1-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-develUpgrade netcdf-openmpi-devel-dataUpgrade netcdf-openmpi4Upgrade netcdf_4_7_4-gnu-hpc-develUpgrade netcdf-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-mpich-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-develUpgrade netcdf_4_6_1-gnu-openmpi1-hpcUpgrade libnetcdf-gnu-openmpi1-hpcUpgrade libnetcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf-gnu-openmpi3-hpc-develUpgrade netcdf-openmpiUpgrade netcdf_4_7_3-gnu-openmpi3-hpcUpgrade libnetcdf-gnu-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-openmpi4-hpcUpgrade libnetcdf18-openmpi2Upgrade netcdf_4_7_4-gnu-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-openmpi2-hpcUpgrade libnetcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf-devel-dataUpgrade netcdf_4_7_3-gnu-mpich-hpcUpgrade libnetcdf18-openmpi4Upgrade netcdf_4_7_3-gnu-hpcUpgrade netcdf-openmpi3-develUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-hpcUpgrade netcdf_4_7_3-gnu-hpc-develUpgrade libnetcdf13-openmpiUpgrade netcdf-devel-staticUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-develUpgrade netcdf-openmpi4-develUpgrade netcdf_4_7_3-gnu-mpich-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-develUpgrade netcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf-openmpi2Upgrade netcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf-gnu-openmpi3-hpcUpgrade libnetcdf18-openmpi2-32bitUpgrade libnetcdf_4_7_3-gnu-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticUpgrade netcdf-openmpi3Upgrade netcdf-gnu-openmpi1-hpc-develUpgrade netcdf-openmpi-devel-staticUpgrade netcdf-gnu-mpich-hpcUpgrade netcdf-gnu-hpc-develUpgrade libnetcdf13-openmpi-32bitUpgrade libnetcdf-gnu-openmpi2-hpcUpgrade libnetcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-mpich-hpc-devel-staticUpgrade netcdf-openmpi-develUpgrade netcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-staticUpgrade libnetcdf_4_6_1-gnu-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpc-develUpgrade libnetcdf-gnu-mpich-hpc | Nov 26, 2021 | Dec 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub