In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptorntriplesparseterminternal().
{ "binaries": [ { "binary_name": "libraptor2-0", "binary_version": "2.0.15-0ubuntu1.20.04.2" }, { "binary_name": "raptor2-utils", "binary_version": "2.0.15-0ubuntu1.20.04.2" } ], "availability": "No subscription required" }
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-57822.json"
{ "binaries": [ { "binary_name": "libraptor2-0", "binary_version": "2.0.15-0ubuntu4.1" }, { "binary_name": "raptor2-utils", "binary_version": "2.0.15-0ubuntu4.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libraptor2-0", "binary_version": "2.0.16-3ubuntu0.1" }, { "binary_name": "raptor2-utils", "binary_version": "2.0.16-3ubuntu0.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libraptor2-0", "binary_version": "2.0.16-4ubuntu1" }, { "binary_name": "raptor2-utils", "binary_version": "2.0.16-4ubuntu1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libraptor2-0", "binary_version": "2.0.14-1ubuntu0.16.04.1+esm1" }, { "binary_name": "raptor2-utils", "binary_version": "2.0.14-1ubuntu0.16.04.1+esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "libraptor2-0", "binary_version": "2.0.14-1ubuntu0.18.04.1+esm1" }, { "binary_name": "raptor2-utils", "binary_version": "2.0.14-1ubuntu0.18.04.1+esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }