4.0Media
CVE-2024-57822
Descripción
In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal().
Debilidad (CWE):
CWE-125
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| librdf | Raptor RDF Syntax Library | ≤ 2.0.16 |
Referencias y parches
- https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md ExploitThird Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896 ExploitMailing ListThird Party Advisory
- https://github.com/dajobe/raptor/issues/70 ExploitIssue Tracking
- https://lists.debian.org/debian-lts-announce/2025/10/msg00023.html
Coincidencias CPE (NVD) (1)
cpe:2.3:a:librdf:raptor_rdf_syntax_library:*:*:*:*:*:*:*:*≤ 2.0.16