CVE-2017-18926
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.0%
raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
Produtos afetados
n/a · n/aReferências
https://github.com/LibreOffice/core/blob/master/external/redland/raptor/0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1https://lists.debian.org/debian-lts-announce/2020/11/msg00012.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD67AVORGQXORPWNYYUHCH6YPPT6CI4O/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVHFYQDMVEBICIL4DBAGRRLPUR4QYWMV/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDZRNM45VPTQF2BKRWG4YRCHJGQ2L7NS/https://www.debian.org/security/2020/dsa-4785https://www.openwall.com/lists/oss-security/2017/06/07/1http://www.openwall.com/lists/oss-security/2020/11/13/1http://www.openwall.com/lists/oss-security/2020/11/13/2http://www.openwall.com/lists/oss-security/2020/11/14/2http://www.openwall.com/lists/oss-security/2020/11/16/2http://www.openwall.com/lists/oss-security/2020/11/16/3