The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade netcdf-parallelUpgrade netcdf | Jul 30, 2024 | Feb 8, 2021 |
| Suse | — | Upgrade netcdf-openmpi3-develUpgrade netcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-develUpgrade libnetcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpcUpgrade libnetcdf13-openmpi-32bitUpgrade netcdfUpgrade netcdf-gnu-openmpi4-hpcUpgrade netcdf-gnu-mvapich2-hpcUpgrade netcdf-openmpi2Upgrade libnetcdf18-openmpi3Upgrade netcdf_4_6_1-gnu-hpc-develUpgrade netcdf-gnu-openmpi2-hpcUpgrade netcdf-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-hpcUpgrade libnetcdf-gnu-hpcUpgrade libnetcdf-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-develUpgrade netcdf_4_6_1-gnu-hpc-devel-dataUpgrade netcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_4-gnu-hpcUpgrade libnetcdf-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpcUpgrade libnetcdf18-openmpi4Upgrade netcdf_4_7_4-gnu-openmpi4-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-develUpgrade netcdf-develUpgrade netcdf-gnu-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpc-develUpgrade libnetcdf_4_7_3-gnu-mpich-hpcUpgrade libnetcdf18Upgrade netcdf-openmpiUpgrade libnetcdf-gnu-openmpi3-hpcUpgrade netcdf-openmpi2-develUpgrade netcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_4-gnu-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-hpcUpgrade libnetcdf13Upgrade netcdf-devel-staticUpgrade libnetcdf_4_7_3-gnu-openmpi3-hpcUpgrade libnetcdf18-openmpi4-32bitUpgrade netcdf_4_7_4-gnu-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-openmpi4-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-develUpgrade libnetcdf13-32bitUpgrade libnetcdf-gnu-openmpi1-hpcUpgrade netcdf-openmpi2-devel-staticUpgrade netcdf-openmpi-develUpgrade netcdf_4_7_3-gnu-hpc-develUpgrade netcdf-gnu-hpc-develUpgrade netcdf_4_6_1-gnu-mpich-hpc-devel-staticUpgrade netcdf-gnu-openmpi1-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-mpich-hpc-develUpgrade libnetcdf_4_7_3-gnu-hpcUpgrade libnetcdf18-32bitUpgrade netcdf-gnu-mpich-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-develUpgrade libnetcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi4-hpcUpgrade libnetcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-develUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-develUpgrade netcdf-openmpi3-devel-staticUpgrade netcdf-openmpi4-develUpgrade netcdf-devel-dataUpgrade libnetcdf18-openmpi2Upgrade libnetcdf18-openmpi2-32bitUpgrade netcdf_4_6_1-gnu-hpc-devel-staticUpgrade netcdf-openmpi4Upgrade netcdf_4_7_3-gnu-mpich-hpc-develUpgrade netcdf-openmpi4-devel-staticUpgrade netcdf-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticUpgrade libnetcdf_4_7_3-gnu-openmpi2-hpcUpgrade libnetcdf_4_7_4-gnu-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-openmpi3-hpcUpgrade libnetcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf-gnu-openmpi3-hpc-develUpgrade libnetcdf-gnu-openmpi4-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticUpgrade libnetcdf-gnu-mvapich2-hpcUpgrade netcdf-openmpi-devel-staticUpgrade libnetcdf13-openmpiUpgrade libnetcdf_4_6_1-gnu-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpc-devel-staticUpgrade libnetcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf-gnu-openmpi4-hpc-develUpgrade netcdf-openmpi3Upgrade libnetcdf_4_6_1-gnu-openmpi2-hpcUpgrade libnetcdf18-openmpi3-32bitUpgrade netcdf-openmpi-devel-dataUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-develUpgrade netcdf-gnu-openmpi1-hpc-devel | Nov 26, 2021 | Feb 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub