Log in Start free

Vulnerability · Published May 13, 2021 · Assigned by redhat

CVE-2020-25713

Medium 6.5

In plain English

A medium-severity improper input validation in raptor2. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)2.1%top 17.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8raptor22.0.15-16.el8ALSA-2021:1842
AlmaLinux:8raptor2-devel2.0.15-16.el8ALSA-2021:1842
Alpine:v3.20raptor22.0.15-r3ALPINE-CVE-2020-25713
Alpine:v3.21raptor22.0.15-r3ALPINE-CVE-2020-25713
Alpine:v3.22raptor22.0.15-r3ALPINE-CVE-2020-25713
Alpine:v3.23raptor22.0.15-r3ALPINE-CVE-2020-25713
Alpine:v3.24raptor22.0.15-r3ALPINE-CVE-2020-25713
Debian:12raptor22.0.14-1.2DEBIAN-CVE-2020-25713
Debian:13raptor22.0.14-1.2DEBIAN-CVE-2020-25713
Debian:14raptor22.0.14-1.2DEBIAN-CVE-2020-25713
Rocky Linux:8raptor20:2.0.15-16.el8RLSA-2021:1842
Ubuntu:22.04:LTSraptor22.0.15-0ubuntu4.1UBUNTU-CVE-2020-25713
Ubuntu:22.04:LTSraptor22.0.15-0ubuntu4.1USN-7316-1
Ubuntu:24.04:LTSraptor22.0.16-3ubuntu0.1USN-7316-1

Affected products (as reported)

VendorProductVersions
n/a raptor2 raptor2 2.0.15-27.eln108

Weakness: CWE-20

References