CVE-2024-57822: Medium severity Raptor RDF Syntax Library vulnerability
In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptorntriplesparseterminternal().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/raptor2to a version that resolves this vulnerability.Fixed in 2.0.15-4+deb12u1 - Upgrade
Upgrade
debian/raptor2to a version that resolves this vulnerability.Fixed in 2.0.16-6 - Upgrade
Upgrade
debian/raptor2to a version that resolves this vulnerability.Fixed in 2.0.15-4+deb12u1Fixed in 2.0.16-6Fixed in 2.0.16-7
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57822?
CVE-2024-57822 is classified as a medium severity vulnerability due to its potential exploitation through a heap-based buffer over-read.
How do I fix CVE-2024-57822?
To fix CVE-2024-57822, upgrade the Raptor RDF Syntax Library to version 2.0.16 or later.
What type of vulnerability is CVE-2024-57822?
CVE-2024-57822 is a heap-based buffer over-read vulnerability that occurs when parsing triples with the nquads parser.
Which versions of Raptor RDF Syntax Library are affected by CVE-2024-57822?
CVE-2024-57822 affects Raptor RDF Syntax Library versions prior to 2.0.16.
What are the potential impacts of CVE-2024-57822?
The potential impacts of CVE-2024-57822 include application crashes and unintended disclosures of sensitive memory contents.