A malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-raptor2alma-upgrade-raptor2-devel | May 4, 2022 | May 13, 2021 | |
| Alpine Linux | alpine-linux-upgrade-raptor2 | Aug 22, 2024 | May 13, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | May 13, 2021 | |
| Centos_linux | — | centos-upgrade-raptor2centos-upgrade-raptor2-debuginfocentos-upgrade-raptor2-debugsource | Jun 1, 2021 | May 13, 2021 |
| Debian | debian-upgrade-raptor2 | Dec 15, 2021 | May 13, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-raptor2 | Feb 2, 2021 | Feb 1, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-raptor2oracle-linux-upgrade-raptor2-devel | May 26, 2021 | Nov 13, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-raptor2redhat-upgrade-raptor2-debuginforedhat-upgrade-raptor2-debugsourceredhat-upgrade-raptor2-devel | May 21, 2021 | May 13, 2021 | |
| Rocky_linux | rocky-upgrade-raptor2rocky-upgrade-raptor2-debuginforocky-upgrade-raptor2-debugsourcerocky-upgrade-raptor2-devel | Mar 12, 2024 | May 13, 2021 | |
| Suse | — | suse-upgrade-libraptor-develsuse-upgrade-libraptor2-0suse-upgrade-libraptor2-0-32bitsuse-upgrade-raptor | Aug 9, 2024 | May 13, 2021 |
| Ubuntu | ubuntu-pro-upgrade-libraptor1ubuntu-pro-upgrade-libraptor2-0ubuntu-pro-upgrade-raptor-utilsubuntu-pro-upgrade-raptor2-utilsubuntu-upgrade-libraptor2-0ubuntu-upgrade-raptor2-utils | Mar 4, 2025 | May 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub