CVE-2017-18926
libraptor2-0: raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDFSyntax Library 2.0.15 miscalculates the ma...
CVE-2017-18926 is fixed in 4 products on 1 platform, first by libraptor2-0 2.0.14-1ubuntu0.18.04.1, released November 6, 2020. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.1
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0312
87th percentile
raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDFSyntax Library 2.0.15 miscalculates the maximum nspace declarations for theXML writer, leading to heap-based buffer overflows (sometimes seen inraptor_qname_format_as_xml).
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libraptor2-0 · Ubuntu 18.04.6 LTS (bionic) | 2.0.14-1ubuntu0.18.04.1 | libraptor2-0 2.0.14-1ubuntu0.18.04.1 | Nov 6, 2020 |
| libraptor2-0 · Ubuntu 20.04 LTS (focal) | 2.0.15-0ubuntu1.20.04.1 | libraptor2-0 2.0.15-0ubuntu1.20.04.1 | Nov 6, 2020 |
| libraptor2-0 · Ubuntu 22.04.1 LTS (jammy) | 2.0.15-0ubuntu2 | libraptor2-0 2.0.15-0ubuntu2 | Nov 6, 2020 |
| libraptor2-0 · Ubuntu 24.10 (oracular) | 2.0.15-0ubuntu2 | libraptor2-0 2.0.15-0ubuntu2 | Jan 16, 2026 |
| libraptor2-0 · Ubuntu 25.04 (plucky) | 2.0.15-0ubuntu2 | libraptor2-0 2.0.15-0ubuntu2 | Jan 16, 2026 |
| raptor2 · RHEL 8 | 0:2.0.15-16.el8 | RHSA-2021:1842 | May 18, 2021 |
| raptor2 · ol 8 | 0:2.0.15-16.el8 | ELSA-2021-1842 | May 25, 2021 |
| raptor2-devel · RHEL 8 | 0:2.0.15-16.el8 | RHSA-2021:1842 | May 18, 2021 |
| raptor2-devel · ol 8 | 0:2.0.15-16.el8 | ELSA-2021-1842 | May 25, 2021 |
| raptor2-utils · Ubuntu 18.04.6 LTS (bionic) | 2.0.14-1ubuntu0.18.04.1 | raptor2-utils 2.0.14-1ubuntu0.18.04.1 | Nov 6, 2020 |
| raptor2-utils · Ubuntu 20.04 LTS (focal) | 2.0.15-0ubuntu1.20.04.1 | raptor2-utils 2.0.15-0ubuntu1.20.04.1 | Nov 6, 2020 |
| raptor2-utils · Ubuntu 22.04.1 LTS (jammy) | 2.0.15-0ubuntu2 | raptor2-utils 2.0.15-0ubuntu2 | Nov 6, 2020 |
| raptor2-utils · Ubuntu 24.10 (oracular) | 2.0.15-0ubuntu2 | raptor2-utils 2.0.15-0ubuntu2 | Jan 16, 2026 |
| raptor2-utils · Ubuntu 25.04 (plucky) | 2.0.15-0ubuntu2 | raptor2-utils 2.0.15-0ubuntu2 | Jan 16, 2026 |