An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer (in some compilers). After this, the function ezxml_parse_str does not check whether the s variable is not NULL in ezxml.c, leading to a NULL pointer dereference and crash (segmentation fault).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade netcdfUpgrade netcdf-parallel | Jul 30, 2024 | Dec 26, 2019 |
| Suse | — | Upgrade netcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf-openmpi2-devel-staticUpgrade libnetcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpcUpgrade libnetcdf13-openmpi-32bitUpgrade netcdf-gnu-openmpi4-hpcUpgrade libnetcdf_4_6_1-gnu-mpich-hpcUpgrade libnetcdf_4_7_4-gnu-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-develUpgrade libnetcdf18-openmpi3-32bitUpgrade netcdf_4_6_1-gnu-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpc-develUpgrade libnetcdf_4_7_3-gnu-hpcUpgrade libnetcdf18-openmpi4Upgrade netcdf-gnu-openmpi3-hpc-develUpgrade netcdf-openmpi4-develUpgrade netcdf_4_6_1-gnu-mpich-hpc-develUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-devel-staticUpgrade netcdf-openmpi3-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticUpgrade netcdf-openmpi-devel-dataUpgrade libnetcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf-gnu-openmpi3-hpcUpgrade libnetcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf-gnu-mpich-hpc-develUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-develUpgrade libnetcdf_4_7_4-gnu-openmpi3-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_7_3-gnu-hpcUpgrade netcdf-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticUpgrade libnetcdf18-openmpi3Upgrade libnetcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf-gnu-openmpi4-hpc-develUpgrade netcdf_4_6_1-gnu-hpcUpgrade libnetcdf_4_7_4-gnu-mpich-hpcUpgrade libnetcdf_4_7_3-gnu-mvapich2-hpcUpgrade libnetcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf-openmpi4-devel-staticUpgrade netcdf_4_6_1-gnu-mpich-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-develUpgrade libnetcdf-gnu-openmpi1-hpcUpgrade libnetcdf-gnu-openmpi2-hpcUpgrade libnetcdf-gnu-openmpi3-hpcUpgrade libnetcdf18-32bitUpgrade netcdf_4_7_3-gnu-mpich-hpc-develUpgrade netcdf-openmpi3Upgrade netcdf-devel-staticUpgrade netcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpc-devel-staticUpgrade libnetcdf18-openmpi4-32bitUpgrade libnetcdf18Upgrade netcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpc-devel-staticUpgrade netcdf-openmpi-devel-staticUpgrade netcdfUpgrade netcdf_4_7_3-gnu-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi4-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-develUpgrade netcdf-gnu-mvapich2-hpcUpgrade netcdf-gnu-hpc-develUpgrade libnetcdf13Upgrade libnetcdf13-32bitUpgrade netcdf-gnu-openmpi1-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-develUpgrade libnetcdf18-openmpi2-32bitUpgrade libnetcdf18-openmpi2Upgrade netcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticUpgrade netcdf-gnu-hpcUpgrade netcdf-gnu-openmpi2-hpc-develUpgrade netcdf-openmpi2Upgrade netcdf-openmpi-develUpgrade libnetcdf13-openmpiUpgrade netcdf_4_7_4-gnu-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticUpgrade netcdf-devel-dataUpgrade libnetcdf-gnu-mvapich2-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-staticUpgrade libnetcdf-gnu-mpich-hpcUpgrade libnetcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticUpgrade netcdf-openmpi3-develUpgrade libnetcdf-gnu-openmpi4-hpcUpgrade netcdf-openmpi4Upgrade netcdf-gnu-openmpi1-hpcUpgrade libnetcdf_4_6_1-gnu-hpcUpgrade libnetcdf-gnu-hpcUpgrade netcdf-openmpiUpgrade netcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-develUpgrade netcdf-openmpi2-develUpgrade netcdf_4_6_1-gnu-hpc-devel-dataUpgrade libnetcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-hpc-develUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticUpgrade netcdf-gnu-mpich-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi4-hpcUpgrade netcdf-develUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-develUpgrade netcdf-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel | Nov 26, 2021 | Dec 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub