CVE-2024-57823 | THREATINT

Description

In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().

Reserved 2025-01-10 | Published 2025-01-10 | Updated 2025-01-10 | Assigner mitre

CRITICAL: 9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-191 Integer Underflow (Wrap or Wraparound)

Product status

Default status

unknown

Any version

affected

References

github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md

bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896

github.com/dajobe/raptor/issues/70

cve.org (CVE-2024-57823)

nvd.nist.gov (CVE-2024-57823)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.