CVE-2021-31348
16.04.2021, 18:15
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (out-of-bounds read after a certain strcspn failure).Enginsight
| Vendor | Product | Version |
|---|---|---|
| ezxml_project | ezxml | 0.8.6 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mapcache |
| ||||||||||||
| netcdf |
| ||||||||||||
| netcdf-parallel |
| ||||||||||||
| scilab |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mapcache |
| ||||||||||||||||||||||||
| netcdf |
| ||||||||||||||||||||||||
| netcdf-parallel |
| ||||||||||||||||||||||||
| scilab |
|
Common Weakness Enumeration