An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handling while parsing crafted XML files, which leads to an out-of-bounds write of a one byte constant.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade netcdfUpgrade netcdf-parallel | Jul 9, 2021 | Apr 15, 2021 |
| Suse | — | Upgrade netcdf_4_7_4-gnu-openmpi4-hpc-devel-staticUpgrade netcdf-devel-staticUpgrade netcdf-openmpi-develUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-develUpgrade netcdf-gnu-mpich-hpcUpgrade libnetcdf-gnu-openmpi2-hpcUpgrade netcdf-gnu-openmpi2-hpc-develUpgrade netcdf-openmpiUpgrade netcdf_4_7_3-gnu-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpcUpgrade libnetcdf18-openmpi3Upgrade libnetcdf-gnu-openmpi1-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-develUpgrade libnetcdf-gnu-hpcUpgrade netcdf-openmpi2-devel-staticUpgrade libnetcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-develUpgrade libnetcdf18-openmpi4Upgrade netcdf-gnu-openmpi1-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-openmpi4-hpcUpgrade libnetcdf13-openmpi-32bitUpgrade libnetcdf13Upgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf-gnu-hpc-develUpgrade libnetcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-dataUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-hpc-devel-staticUpgrade netcdf-develUpgrade netcdf-openmpi2-develUpgrade libnetcdf18Upgrade libnetcdf13-32bitUpgrade netcdf-gnu-openmpi2-hpcUpgrade netcdf_4_7_3-gnu-hpc-develUpgrade libnetcdf-gnu-openmpi3-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf_4_6_1-gnu-hpc-develUpgrade netcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-mpich-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpc-devel-staticUpgrade netcdf-gnu-hpcUpgrade netcdf_4_7_4-gnu-mpich-hpcUpgrade netcdfUpgrade libnetcdf18-openmpi2-32bitUpgrade libnetcdf18-openmpi4-32bitUpgrade netcdf-gnu-mvapich2-hpcUpgrade libnetcdf-gnu-mpich-hpcUpgrade netcdf-openmpi2Upgrade netcdf_4_7_3-gnu-mpich-hpc-devel-staticUpgrade libnetcdf-gnu-mvapich2-hpcUpgrade libnetcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-staticUpgrade libnetcdf18-openmpi3-32bitUpgrade libnetcdf-gnu-openmpi4-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_3-gnu-mpich-hpcUpgrade libnetcdf18-openmpi2Upgrade libnetcdf18-32bitUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticUpgrade netcdf-openmpi4-devel-staticUpgrade libnetcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf-gnu-openmpi4-hpc-develUpgrade libnetcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-hpc-devel-staticUpgrade libnetcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-mpich-hpc-develUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-develUpgrade netcdf-gnu-openmpi4-hpcUpgrade netcdf-openmpi3Upgrade netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticUpgrade libnetcdf_4_6_1-gnu-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticUpgrade netcdf-openmpi3-develUpgrade netcdf_4_7_4-gnu-openmpi4-hpcUpgrade libnetcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf-gnu-mvapich2-hpc-develUpgrade libnetcdf13-openmpiUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-develUpgrade netcdf-openmpi-devel-staticUpgrade netcdf-gnu-openmpi3-hpcUpgrade netcdf-gnu-openmpi1-hpc-develUpgrade libnetcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf-openmpi4-develUpgrade netcdf-openmpi-devel-dataUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-develUpgrade netcdf-openmpi4Upgrade netcdf-devel-dataUpgrade libnetcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticUpgrade netcdf-gnu-mpich-hpc-develUpgrade netcdf-gnu-openmpi3-hpc-develUpgrade netcdf-openmpi3-devel-staticUpgrade libnetcdf_4_7_3-gnu-hpcUpgrade libnetcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpc-develUpgrade libnetcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf_4_6_1-gnu-hpcUpgrade libnetcdf_4_7_4-gnu-hpc | Nov 26, 2021 | Apr 15, 2021 |
| Ubuntu | — | Upgrade scilab-test (Ubuntu Pro)Upgrade scilab-data (Ubuntu Pro)Upgrade scilab (Ubuntu Pro)Upgrade scilab-minimal-bin (Ubuntu Pro)Upgrade scilab-full-bin (Ubuntu Pro) | Mar 22, 2023 | Apr 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub