Summary
Hanno Böck discovered that Raptor incorrectly handled certain memory
operations. If a user were tricked into opening a specially crafted
document in an application linked against Raptor, an attacker could
cause the application to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | raptor2 | 2.0.14-1ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | raptor2 | 2.0.14-1ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | raptor2 | 2.0.15-0ubuntu1.20.04.1 |
Vulnerabilities 1
-
Unscored —
raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the max…
References
-
report
https://ubuntu.com/security/CVE-2017-18926