An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade netcdf-parallelUpgrade netcdf | Jul 30, 2024 | Dec 31, 2019 |
| Suse | — | Upgrade libnetcdf18Upgrade netcdf-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-hpc-devel-staticUpgrade libnetcdf13-openmpiUpgrade netcdf-gnu-openmpi3-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticUpgrade netcdf-openmpi-devel-dataUpgrade libnetcdf13-32bitUpgrade libnetcdf18-openmpi2Upgrade libnetcdf18-openmpi3-32bitUpgrade netcdf-openmpi-develUpgrade libnetcdf-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-develUpgrade netcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf-openmpi3-develUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-develUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-mpich-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-hpcUpgrade netcdf-gnu-openmpi2-hpc-develUpgrade netcdf_4_6_1-gnu-hpc-develUpgrade netcdf-gnu-mpich-hpc-develUpgrade netcdf_4_7_3-gnu-hpc-develUpgrade netcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-hpc-devel-staticUpgrade libnetcdf-gnu-openmpi1-hpcUpgrade libnetcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpcUpgrade libnetcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf-develUpgrade netcdf-gnu-openmpi3-hpc-develUpgrade libnetcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpc-devel-staticUpgrade netcdf-gnu-mvapich2-hpc-develUpgrade netcdf-openmpi-devel-staticUpgrade netcdf-gnu-openmpi4-hpcUpgrade netcdf_4_7_4-gnu-mpich-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-develUpgrade netcdf-gnu-openmpi4-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticUpgrade netcdf-devel-dataUpgrade libnetcdf_4_7_3-gnu-hpcUpgrade libnetcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf-gnu-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpcUpgrade libnetcdf18-openmpi4Upgrade netcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf-gnu-openmpi2-hpcUpgrade netcdf-openmpi2Upgrade netcdf_4_7_3-gnu-mpich-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf-openmpi4-develUpgrade libnetcdf18-openmpi3Upgrade libnetcdf_4_7_4-gnu-openmpi4-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-develUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-develUpgrade netcdf-gnu-openmpi1-hpc-develUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticUpgrade netcdf-openmpiUpgrade netcdf-gnu-hpcUpgrade libnetcdf-gnu-hpcUpgrade netcdf-openmpi4Upgrade libnetcdf-gnu-openmpi4-hpcUpgrade libnetcdf-gnu-mvapich2-hpcUpgrade libnetcdf13Upgrade libnetcdf_4_7_4-gnu-hpcUpgrade netcdf-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-develUpgrade libnetcdf_4_7_4-gnu-mvapich2-hpcUpgrade libnetcdf-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticUpgrade libnetcdf-gnu-openmpi3-hpcUpgrade netcdf-openmpi2-develUpgrade libnetcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-dataUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-develUpgrade libnetcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpc-devel-staticUpgrade libnetcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-develUpgrade netcdf-openmpi3Upgrade libnetcdf_4_6_1-gnu-mvapich2-hpcUpgrade libnetcdf13-openmpi-32bitUpgrade netcdf_4_6_1-gnu-mpich-hpc-develUpgrade netcdf_4_6_1-gnu-hpcUpgrade libnetcdf18-32bitUpgrade netcdf-openmpi4-devel-staticUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-develUpgrade libnetcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpcUpgrade libnetcdf_4_6_1-gnu-hpcUpgrade libnetcdf18-openmpi2-32bitUpgrade netcdf_4_7_4-gnu-hpcUpgrade netcdfUpgrade netcdf-openmpi3-devel-staticUpgrade netcdf-openmpi2-devel-staticUpgrade netcdf-gnu-openmpi1-hpcUpgrade libnetcdf_4_6_1-gnu-openmpi1-hpcUpgrade libnetcdf18-openmpi4-32bitUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpc | Nov 26, 2021 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub