Description (CNA)
In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal().
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| librdf / Raptor RDF Syntax Library | affected 0 through 2.0.16 |
CWE
CWE-125
References
- https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896
- https://github.com/dajobe/raptor/issues/70
ADP enrichment
No English description supplied.
No English description supplied.