An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (writing outside a memory region created by mmap).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade netcdfUpgrade netcdf-parallel | Jul 9, 2021 | Apr 16, 2021 |
| Suse | — | Upgrade libnetcdf18-openmpi2Upgrade netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticUpgrade netcdf-openmpi4-develUpgrade libnetcdf_4_7_3-gnu-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticUpgrade libnetcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf-gnu-openmpi3-hpcUpgrade netcdf-gnu-openmpi3-hpc-develUpgrade libnetcdf_4_6_1-gnu-mpich-hpcUpgrade libnetcdf-gnu-openmpi2-hpcUpgrade netcdf-openmpi-devel-staticUpgrade libnetcdf_4_6_1-gnu-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-develUpgrade netcdf-openmpi3Upgrade libnetcdf_4_7_4-gnu-openmpi4-hpcUpgrade netcdf_4_7_3-gnu-hpcUpgrade netcdf_4_7_4-gnu-mpich-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-mpich-hpc-develUpgrade netcdf_4_7_3-gnu-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf-gnu-openmpi1-hpc-develUpgrade libnetcdf18-openmpi2-32bitUpgrade netcdf_4_7_4-gnu-hpc-devel-staticUpgrade netcdf-openmpi3-develUpgrade libnetcdf-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticUpgrade netcdf-gnu-hpc-develUpgrade libnetcdf18-32bitUpgrade libnetcdf13-openmpi-32bitUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf-gnu-openmpi4-hpc-develUpgrade netcdf_4_6_1-gnu-hpc-develUpgrade netcdf_4_7_3-gnu-mpich-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf-openmpi-devel-dataUpgrade netcdf_4_7_4-gnu-mpich-hpc-develUpgrade netcdf-openmpi2Upgrade netcdf-devel-dataUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-develUpgrade libnetcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf-gnu-openmpi4-hpcUpgrade libnetcdf13-openmpiUpgrade libnetcdf18-openmpi3-32bitUpgrade netcdf_4_7_3-gnu-hpc-develUpgrade netcdf-openmpi2-develUpgrade netcdfUpgrade netcdf-openmpi4Upgrade netcdf-gnu-openmpi2-hpc-develUpgrade libnetcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf-gnu-hpcUpgrade libnetcdf18-openmpi4Upgrade netcdf-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpcUpgrade libnetcdf18Upgrade libnetcdf18-openmpi4-32bitUpgrade libnetcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf-gnu-openmpi1-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-develUpgrade libnetcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf-openmpi2-devel-staticUpgrade libnetcdf_4_7_3-gnu-openmpi3-hpcUpgrade libnetcdf-gnu-openmpi4-hpcUpgrade libnetcdf-gnu-openmpi3-hpcUpgrade libnetcdf-gnu-openmpi1-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-develUpgrade netcdf_4_6_1-gnu-hpc-devel-dataUpgrade netcdf-openmpi3-devel-staticUpgrade libnetcdf-gnu-mvapich2-hpcUpgrade libnetcdf_4_6_1-gnu-mvapich2-hpcUpgrade libnetcdf13-32bitUpgrade netcdf-gnu-mpich-hpc-develUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-develUpgrade libnetcdf13Upgrade netcdf_4_7_4-gnu-openmpi3-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpc-devel-staticUpgrade netcdf-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticUpgrade netcdf-openmpiUpgrade netcdf_4_6_1-gnu-mpich-hpc-develUpgrade netcdf_4_6_1-gnu-hpcUpgrade libnetcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-develUpgrade netcdf-openmpi-develUpgrade netcdf_4_7_3-gnu-mvapich2-hpcUpgrade libnetcdf-gnu-hpcUpgrade libnetcdf18-openmpi3Upgrade netcdf-openmpi4-devel-staticUpgrade netcdf-gnu-mvapich2-hpc-develUpgrade libnetcdf_4_7_4-gnu-hpcUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-develUpgrade libnetcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf-gnu-mvapich2-hpcUpgrade netcdf-develUpgrade netcdf_4_7_4-gnu-hpc-devel | Nov 26, 2021 | Apr 16, 2021 |
| Ubuntu | — | Upgrade scilab-minimal-bin (Ubuntu Pro)Upgrade scilab-test (Ubuntu Pro)Upgrade scilab (Ubuntu Pro)Upgrade scilab-full-bin (Ubuntu Pro)Upgrade scilab-data (Ubuntu Pro) | Mar 22, 2023 | Apr 16, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub