Name: CVE-2019-20202: Release of Invalid Pointer or Reference
Creator: Rapid7
Published: 2019-12-31T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-20202, CWE-763, CVSS 6.5, EPSS 0.00405

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade netcdf-parallelUpgrade netcdf	Jul 30, 2024	Dec 31, 2019
Suse	—	Upgrade netcdf-openmpi-devel-dataUpgrade netcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf-openmpi-devel-staticUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpc-develUpgrade libnetcdf13-32bitUpgrade netcdf-openmpi-develUpgrade netcdf-gnu-openmpi3-hpcUpgrade netcdf-gnu-openmpi3-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticUpgrade netcdf-openmpi4-develUpgrade libnetcdf18-openmpi3-32bitUpgrade netcdf_4_6_1-gnu-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-mpich-hpc-devel-staticUpgrade netcdf-gnu-openmpi4-hpcUpgrade libnetcdf18Upgrade libnetcdf-gnu-mpich-hpcUpgrade libnetcdf13-openmpiUpgrade netcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-hpc-develUpgrade netcdf_4_7_3-gnu-mpich-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpcUpgrade libnetcdf_4_7_3-gnu-openmpi2-hpcUpgrade libnetcdf18-openmpi4Upgrade netcdf_4_7_4-gnu-openmpi4-hpc-develUpgrade netcdf-gnu-openmpi2-hpc-develUpgrade netcdf-openmpi3-develUpgrade libnetcdf_4_7_3-gnu-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf-gnu-openmpi4-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi3-hpcUpgrade libnetcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-hpc-develUpgrade netcdf-openmpi2Upgrade netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-mpich-hpc-devel-staticUpgrade libnetcdf_4_7_3-gnu-mpich-hpcUpgrade libnetcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf-gnu-hpc-develUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-develUpgrade netcdf_4_7_3-gnu-hpcUpgrade netcdf_4_7_4-gnu-hpc-develUpgrade netcdf-gnu-mpich-hpc-develUpgrade netcdf-devel-dataUpgrade libnetcdf18-openmpi2Upgrade netcdf-develUpgrade netcdf-gnu-mvapich2-hpc-develUpgrade netcdf_4_6_1-gnu-openmpi2-hpcUpgrade libnetcdf-gnu-openmpi1-hpcUpgrade netcdf-openmpi3-devel-staticUpgrade netcdf_4_7_4-gnu-hpcUpgrade netcdf-openmpi2-devel-staticUpgrade netcdfUpgrade libnetcdf_4_6_1-gnu-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-develUpgrade netcdf-gnu-openmpi1-hpc-develUpgrade libnetcdf_4_7_4-gnu-openmpi4-hpcUpgrade netcdf-devel-staticUpgrade libnetcdf_4_6_1-gnu-openmpi1-hpcUpgrade libnetcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf-openmpi2-develUpgrade netcdf_4_6_1-gnu-hpc-devel-dataUpgrade libnetcdf-gnu-mvapich2-hpcUpgrade libnetcdf-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticUpgrade netcdf-gnu-openmpi1-hpcUpgrade netcdf-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-develUpgrade netcdf_4_6_1-gnu-mpich-hpc-develUpgrade libnetcdf-gnu-hpcUpgrade libnetcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpcUpgrade libnetcdf-gnu-openmpi4-hpcUpgrade libnetcdf18-openmpi4-32bitUpgrade libnetcdf18-32bitUpgrade netcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-develUpgrade libnetcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf-gnu-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-develUpgrade libnetcdf-gnu-openmpi3-hpcUpgrade libnetcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-develUpgrade libnetcdf13-openmpi-32bitUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-develUpgrade netcdf-openmpi4Upgrade netcdf-openmpi4-devel-staticUpgrade netcdf-openmpi3Upgrade netcdf-openmpiUpgrade libnetcdf_4_7_4-gnu-hpcUpgrade libnetcdf18-openmpi3Upgrade netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-mpich-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticUpgrade libnetcdf13Upgrade netcdf_4_6_1-gnu-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi2-hpcUpgrade libnetcdf18-openmpi2-32bitUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel	Nov 26, 2021	Dec 31, 2019

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence