CVE-2017-18926

Name of the Vulnerable Software and Affected Versions Raptor RDF Syntax Library version 2.0.15

Description The issue is related to the raptor xml writer start element common function in the Raptor RDF Syntax Library, which miscalculates the maximum number of nspace declarations for the XML writer. This can lead to heap-based buffer overflows, sometimes seen in the raptor qname format as xml function. The vulnerability can be exploited by a remote attacker to compromise data integrity or cause a denial of service.

Recommendations For Raptor RDF Syntax Library version 2.0.15, consider updating to a newer version that addresses the issue, as the current version has a miscalculation in the raptor xml writer start element common function that can lead to heap-based buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.