CVE-2020-25713: Input Validation
A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/raptor2to a version that resolves this vulnerability.Fixed in 2.0.14-1.2Fixed in 2.0.15-4Fixed in 2.0.16-5 - Upgrade
Upgrade
alpine/raptor2to a version that resolves this vulnerability.Fixed in 2.0.15-r3
Event History
Frequently Asked Questions
What is CVE-2020-25713?
CVE-2020-25713 is a vulnerability that occurs due to a malformed input file, leading to a segmentation fault caused by an out-of-bounds array access in raptor_xml_writer_start_element_common.
What is the severity of CVE-2020-25713?
The severity of CVE-2020-25713 is medium, with a severity value of 6.5.
Which software is affected by CVE-2020-25713?
The affected software includes Librdf Raptor Rdf Syntax Library version 2.0.15, Fedoraproject Fedora versions 32 and 33, and Debian Debian Linux version 9.0.
How can CVE-2020-25713 be exploited?
CVE-2020-25713 can be exploited by providing a malformed input file to the affected software, triggering the out-of-bounds array access and resulting in a segmentation fault.
Is there a fix available for CVE-2020-25713?
Yes, patches and updates have been released by the respective vendors to address CVE-2020-25713. It is recommended to update the affected software to the latest version.