PT-2025-3589

CVE-2024-57823

·

Published

2025-01-10

·

Updated

2025-11-10

Description by

CVSS 3.1
9.3
Critical
MetricsAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Raptor RDF Syntax Library versions 2.0.0 through 2.0.16
Description The issue is related to an integer underflow when normalizing a URI with the turtle parser in the raptor uri normalize path() function. This problem occurs in the Raptor RDF Syntax Library. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
Recommendations For Raptor RDF Syntax Library versions 2.0.0 through 2.0.16, update to a version later than 2.0.16 to resolve the issue. As a temporary workaround, consider restricting the use of the raptor uri normalize path() function until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2025:0312
ALSA-2025:0314
ALT-PU-2025-12933
AZL-55472
AZL-55481
CESA-2025_0314
DLA-4343-1
INFSA-2025_0312
INFSA-2025_0314
MGASA-2025-0018
OESA-2025-1453
OPENSUSE-SU-2025:14646-1
RHSA-2025:0310
RHSA-2025:0311
RHSA-2025:0312
RHSA-2025_0312
RHSA-2025:0313
RHSA-2025:0314
RHSA-2025_0314
RHSA-2025:0315
RHSA-2025:0316
RHSA-2025:0318
RHSA-2025:0319
RHSA-2025:0326
RLSA-2025:0312
RLSA-2025:0314
ROSA-SA-2025-2761
SUSE-SU-2025:03244-1
SUSE-SU-2025_03244-1
SUSE-SU-2025:03257-1
SUSE-SU-2025_03257-1
USN-7316-1
USN-7869-1
Found an issue in the description? Have something to add? Feel free to write us 👾