An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (out-of-bounds read after a certain strcspn failure).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-netcdfdebian-upgrade-netcdf-parallel | Jul 9, 2021 | Apr 16, 2021 | |
| Suse | — | suse-upgrade-libnetcdf-gnu-hpcsuse-upgrade-libnetcdf-gnu-mpich-hpcsuse-upgrade-libnetcdf-gnu-mvapich2-hpcsuse-upgrade-libnetcdf-gnu-openmpi1-hpcsuse-upgrade-libnetcdf-gnu-openmpi2-hpcsuse-upgrade-libnetcdf-gnu-openmpi3-hpcsuse-upgrade-libnetcdf-gnu-openmpi4-hpcsuse-upgrade-libnetcdf13suse-upgrade-libnetcdf13-32bitsuse-upgrade-libnetcdf13-openmpisuse-upgrade-libnetcdf13-openmpi-32bitsuse-upgrade-libnetcdf18suse-upgrade-libnetcdf18-32bitsuse-upgrade-libnetcdf18-openmpi2suse-upgrade-libnetcdf18-openmpi2-32bitsuse-upgrade-libnetcdf18-openmpi3suse-upgrade-libnetcdf18-openmpi3-32bitsuse-upgrade-libnetcdf18-openmpi4suse-upgrade-libnetcdf18-openmpi4-32bitsuse-upgrade-libnetcdf_4_6_1-gnu-hpcsuse-upgrade-libnetcdf_4_6_1-gnu-mpich-hpcsuse-upgrade-libnetcdf_4_6_1-gnu-mvapich2-hpcsuse-upgrade-libnetcdf_4_6_1-gnu-openmpi1-hpcsuse-upgrade-libnetcdf_4_6_1-gnu-openmpi2-hpcsuse-upgrade-libnetcdf_4_7_3-gnu-hpcsuse-upgrade-libnetcdf_4_7_3-gnu-mpich-hpcsuse-upgrade-libnetcdf_4_7_3-gnu-mvapich2-hpcsuse-upgrade-libnetcdf_4_7_3-gnu-openmpi2-hpcsuse-upgrade-libnetcdf_4_7_3-gnu-openmpi3-hpcsuse-upgrade-libnetcdf_4_7_4-gnu-hpcsuse-upgrade-libnetcdf_4_7_4-gnu-mpich-hpcsuse-upgrade-libnetcdf_4_7_4-gnu-mvapich2-hpcsuse-upgrade-libnetcdf_4_7_4-gnu-openmpi2-hpcsuse-upgrade-libnetcdf_4_7_4-gnu-openmpi3-hpcsuse-upgrade-libnetcdf_4_7_4-gnu-openmpi4-hpcsuse-upgrade-netcdfsuse-upgrade-netcdf-develsuse-upgrade-netcdf-devel-datasuse-upgrade-netcdf-devel-staticsuse-upgrade-netcdf-gnu-hpcsuse-upgrade-netcdf-gnu-hpc-develsuse-upgrade-netcdf-gnu-mpich-hpcsuse-upgrade-netcdf-gnu-mpich-hpc-develsuse-upgrade-netcdf-gnu-mvapich2-hpcsuse-upgrade-netcdf-gnu-mvapich2-hpc-develsuse-upgrade-netcdf-gnu-openmpi1-hpcsuse-upgrade-netcdf-gnu-openmpi1-hpc-develsuse-upgrade-netcdf-gnu-openmpi2-hpcsuse-upgrade-netcdf-gnu-openmpi2-hpc-develsuse-upgrade-netcdf-gnu-openmpi3-hpcsuse-upgrade-netcdf-gnu-openmpi3-hpc-develsuse-upgrade-netcdf-gnu-openmpi4-hpcsuse-upgrade-netcdf-gnu-openmpi4-hpc-develsuse-upgrade-netcdf-openmpisuse-upgrade-netcdf-openmpi-develsuse-upgrade-netcdf-openmpi-devel-datasuse-upgrade-netcdf-openmpi-devel-staticsuse-upgrade-netcdf-openmpi2suse-upgrade-netcdf-openmpi2-develsuse-upgrade-netcdf-openmpi2-devel-staticsuse-upgrade-netcdf-openmpi3suse-upgrade-netcdf-openmpi3-develsuse-upgrade-netcdf-openmpi3-devel-staticsuse-upgrade-netcdf-openmpi4suse-upgrade-netcdf-openmpi4-develsuse-upgrade-netcdf-openmpi4-devel-staticsuse-upgrade-netcdf_4_6_1-gnu-hpcsuse-upgrade-netcdf_4_6_1-gnu-hpc-develsuse-upgrade-netcdf_4_6_1-gnu-hpc-devel-datasuse-upgrade-netcdf_4_6_1-gnu-hpc-devel-staticsuse-upgrade-netcdf_4_6_1-gnu-mpich-hpcsuse-upgrade-netcdf_4_6_1-gnu-mpich-hpc-develsuse-upgrade-netcdf_4_6_1-gnu-mpich-hpc-devel-staticsuse-upgrade-netcdf_4_6_1-gnu-mvapich2-hpcsuse-upgrade-netcdf_4_6_1-gnu-mvapich2-hpc-develsuse-upgrade-netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticsuse-upgrade-netcdf_4_6_1-gnu-openmpi1-hpcsuse-upgrade-netcdf_4_6_1-gnu-openmpi1-hpc-develsuse-upgrade-netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticsuse-upgrade-netcdf_4_6_1-gnu-openmpi2-hpcsuse-upgrade-netcdf_4_6_1-gnu-openmpi2-hpc-develsuse-upgrade-netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticsuse-upgrade-netcdf_4_7_3-gnu-hpcsuse-upgrade-netcdf_4_7_3-gnu-hpc-develsuse-upgrade-netcdf_4_7_3-gnu-hpc-devel-staticsuse-upgrade-netcdf_4_7_3-gnu-mpich-hpcsuse-upgrade-netcdf_4_7_3-gnu-mpich-hpc-develsuse-upgrade-netcdf_4_7_3-gnu-mpich-hpc-devel-staticsuse-upgrade-netcdf_4_7_3-gnu-mvapich2-hpcsuse-upgrade-netcdf_4_7_3-gnu-mvapich2-hpc-develsuse-upgrade-netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticsuse-upgrade-netcdf_4_7_3-gnu-openmpi2-hpcsuse-upgrade-netcdf_4_7_3-gnu-openmpi2-hpc-develsuse-upgrade-netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticsuse-upgrade-netcdf_4_7_3-gnu-openmpi3-hpcsuse-upgrade-netcdf_4_7_3-gnu-openmpi3-hpc-develsuse-upgrade-netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticsuse-upgrade-netcdf_4_7_4-gnu-hpcsuse-upgrade-netcdf_4_7_4-gnu-hpc-develsuse-upgrade-netcdf_4_7_4-gnu-hpc-devel-staticsuse-upgrade-netcdf_4_7_4-gnu-mpich-hpcsuse-upgrade-netcdf_4_7_4-gnu-mpich-hpc-develsuse-upgrade-netcdf_4_7_4-gnu-mpich-hpc-devel-staticsuse-upgrade-netcdf_4_7_4-gnu-mvapich2-hpcsuse-upgrade-netcdf_4_7_4-gnu-mvapich2-hpc-develsuse-upgrade-netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticsuse-upgrade-netcdf_4_7_4-gnu-openmpi2-hpcsuse-upgrade-netcdf_4_7_4-gnu-openmpi2-hpc-develsuse-upgrade-netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticsuse-upgrade-netcdf_4_7_4-gnu-openmpi3-hpcsuse-upgrade-netcdf_4_7_4-gnu-openmpi3-hpc-develsuse-upgrade-netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticsuse-upgrade-netcdf_4_7_4-gnu-openmpi4-hpcsuse-upgrade-netcdf_4_7_4-gnu-openmpi4-hpc-develsuse-upgrade-netcdf_4_7_4-gnu-openmpi4-hpc-devel-static | Nov 26, 2021 | Apr 16, 2021 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Apr 16, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub