Name: CVE-2021-31598: Out-of-bounds Write
Creator: Rapid7
Published: 2021-04-24T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-31598, CWE-787, CVSS 7.5, EPSS 0.01347

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade netcdfUpgrade netcdf-parallel	Jul 9, 2021	Apr 24, 2021
Suse	—	Upgrade netcdf-gnu-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-dataUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticUpgrade netcdf-gnu-mvapich2-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpc-develUpgrade netcdf-gnu-openmpi1-hpc-develUpgrade netcdf-openmpi2-develUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-develUpgrade libnetcdf18-openmpi4-32bitUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-develUpgrade netcdf-openmpi4-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi4-hpcUpgrade libnetcdf_4_7_4-gnu-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticUpgrade libnetcdf-gnu-mvapich2-hpcUpgrade libnetcdf_4_7_4-gnu-mvapich2-hpcUpgrade libnetcdf18-32bitUpgrade netcdf-gnu-mpich-hpc-develUpgrade netcdf-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticUpgrade netcdf-gnu-openmpi4-hpc-develUpgrade libnetcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_6_1-gnu-hpc-develUpgrade libnetcdf_4_6_1-gnu-openmpi2-hpcUpgrade libnetcdf-gnu-openmpi3-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpc-devel-staticUpgrade libnetcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-mpich-hpc-develUpgrade libnetcdf_4_7_4-gnu-openmpi2-hpcUpgrade libnetcdf18-openmpi3Upgrade netcdf-openmpi2-devel-staticUpgrade netcdf-gnu-openmpi3-hpcUpgrade libnetcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-hpc-develUpgrade libnetcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-develUpgrade netcdf_4_6_1-gnu-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticUpgrade netcdf-openmpi-devel-dataUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpcUpgrade libnetcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf-gnu-openmpi1-hpcUpgrade netcdf-openmpi3-devel-staticUpgrade libnetcdf13Upgrade libnetcdf18-openmpi3-32bitUpgrade libnetcdf_4_7_3-gnu-mvapich2-hpcUpgrade libnetcdf_4_7_3-gnu-openmpi2-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-develUpgrade netcdf-gnu-openmpi4-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf-devel-staticUpgrade libnetcdf18-openmpi2-32bitUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-develUpgrade netcdfUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf-openmpi-develUpgrade netcdf-gnu-hpc-develUpgrade netcdf_4_7_4-gnu-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-hpc-develUpgrade libnetcdf13-32bitUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-develUpgrade netcdf-openmpi4-develUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-devel-staticUpgrade netcdf-gnu-openmpi2-hpc-develUpgrade libnetcdf_4_7_3-gnu-hpcUpgrade libnetcdf-gnu-hpcUpgrade netcdf-openmpiUpgrade libnetcdf-gnu-openmpi2-hpcUpgrade libnetcdf13-openmpiUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticUpgrade netcdf-devel-dataUpgrade libnetcdf18Upgrade netcdf_4_6_1-gnu-mvapich2-hpcUpgrade libnetcdf_4_6_1-gnu-hpcUpgrade libnetcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi1-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-mpich-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-develUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-develUpgrade libnetcdf-gnu-openmpi4-hpcUpgrade libnetcdf13-openmpi-32bitUpgrade netcdf-openmpi3Upgrade libnetcdf18-openmpi2Upgrade libnetcdf_4_7_4-gnu-openmpi4-hpcUpgrade netcdf-openmpi3-develUpgrade netcdf-openmpi4Upgrade libnetcdf18-openmpi4Upgrade netcdf-openmpi2Upgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-hpc-devel-staticUpgrade libnetcdf_4_6_1-gnu-openmpi1-hpcUpgrade libnetcdf-gnu-openmpi1-hpcUpgrade netcdf-develUpgrade netcdf-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf-gnu-openmpi3-hpc-develUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-hpcUpgrade netcdf-openmpi-devel-staticUpgrade netcdf_4_7_4-gnu-mpich-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-openmpi2-hpcUpgrade libnetcdf-gnu-mpich-hpc	Nov 26, 2021	Apr 24, 2021
Ubuntu	—	Upgrade scilab (Ubuntu Pro)Upgrade scilab-full-bin (Ubuntu Pro)Upgrade scilab-minimal-bin (Ubuntu Pro)Upgrade scilab-test (Ubuntu Pro)Upgrade scilab-data (Ubuntu Pro)	Mar 22, 2023	Apr 24, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence