Buffer overflow in Raptor RDF Syntax Library - CVE-2017-18926

Vulnerability identifier: #VU48481

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-18926

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the raptor_xml_writer_start_element_common() function in raptor_xml_writer.c. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Raptor RDF Syntax Library
Arch Linux
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Ubuntu
Fedora
raptor (Ubuntu package)
raptor
libraptor2-0 (Ubuntu package)
raptor2 (Debian package)
raptor2 (Alpine package)
raptor2 (Red Hat package)

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

raptor (Ubuntu package) - update to 1.4.21-11ubuntu0.1~esm1
raptor - addressed in versions 1.4.21-33.fc31, 1.4.21-33.fc32, 1.4.21-33.fc33
libraptor2-0 (Ubuntu package) - addressed in versions 2.0.14-1ubuntu0.16.04.1, 2.0.14-1ubuntu0.18.04.1, 2.0.15-0ubuntu1.20.04.1, 2.0.15-0ubuntu1.20.10.1
raptor2 (Debian package) - update to 2.0.14-1.1~deb10u1
raptor2 (Alpine package) - update to 2.0.15-r0
raptor2 (Red Hat package) - update to 2.0.15-16.el8

• http://www.openwall.com/lists/oss-security/2020/11/13/1
• http://www.openwall.com/lists/oss-security/2020/11/13/2
• http://www.openwall.com/lists/oss-security/2020/11/14/2
• http://www.openwall.com/lists/oss-security/2020/11/16/2
• http://www.openwall.com/lists/oss-security/2020/11/16/3
• https://github.com/LibreOffice/core/blob/master/external/redland/raptor/0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1
• https://lists.debian.org/debian-lts-announce/2020/11/msg00012.html
• https://www.debian.org/security/2020/dsa-4785
• https://www.openwall.com/lists/oss-security/2017/06/07/1

• Multiple vulnerabilities in Raptor RDF Syntax Library
• Arch Linux update for raptor
• Buffer overflow in raptor2 (Alpine package)
• Debian update for raptor2
• Red Hat Enterprise Linux 8 update for raptor2
• Ubuntu update for raptor2
• Fedora 33 update for raptor
• Fedora 32 update for raptor
• Fedora 31 update for raptor
• Ubuntu update for raptor