9.3Kritik
CVE-2024-57823
Açıklama
In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().
Zayıflık türü (CWE):
CWE-191
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| librdf | Raptor RDF Syntax Library | ≤ 2.0.16 |
Kaynaklar ve yamalar
- https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md ExploitThird Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896 ExploitMailing ListThird Party Advisory
- https://github.com/dajobe/raptor/issues/70 ExploitIssue Tracking
- https://lists.debian.org/debian-lts-announce/2025/10/msg00023.html
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:librdf:raptor_rdf_syntax_library:*:*:*:*:*:*:*:*≤ 2.0.16