CVE-2024-57822
NoneCVSS
—
EPSS
0.3%
Published
Jan 10, 2025
CISA due date
—
Cloudanix analysis
A programming mistake in a data-reading library can make programs crash or accidentally show hidden information when they process certain badly formed input files.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Data Exposure
- Component
- Library
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
A heap-based buffer over-read occurs in raptor_ntriples_parse_term_internal() when the nquads parser processes RDF triples, allowing reads past allocated buffer boundaries.
Why it matters to the business
Applications handling untrusted RDF or N-Quads data risk crashes or unintended memory exposure, leading to service disruptions or potential leakage of sensitive information in dependent software.
How an attack unfolds
An attacker supplies crafted N-Quads input containing malformed triples that trigger the over-read during term parsing inside the vulnerable Raptor library function.
How to fix it
Upgrade the Raptor RDF Syntax Library past version 2.0.16. For the listed Chromium packages on Ubuntu 14.04, update to chromium-browser version 58.0.3029.81-0ubuntu0.14.04.1172.
How to confirm the fix worked
Confirm the installed Raptor library version exceeds 2.0.16, recompile dependent applications with the fixed library, and test parsing of boundary-case N-Quads inputs for absence of over-read behavior.
Typical attack path
- Craft malicious N-Quads data designed to exceed expected term lengths
- Deliver the input to any application using the Raptor library for RDF parsing
- Invoke the nquads parser path reaching raptor_ntriples_parse_term_internal()
- Trigger the buffer over-read to induce a crash or observe side-channel memory disclosure
How to detect it
Review application logs and crash dumps for segmentation faults or access violations occurring inside raptor_ntriples_parse_term_internal during N-Quads parsing; correlate with inbound RDF data sources.
What your security team should do
- Immediately update all instances of the Raptor library and affected Chromium packages to the listed fixed versions
- Inventory software that embeds or links against Raptor for RDF processing
- Apply network or application-layer filtering for untrusted RDF/N-Quads data until patches are deployed
- Monitor vulnerability feeds for any future KEV listing given the memory-corruption family
The record
In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal().
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | raptor2 | 0 | No fix |
| Debian:12 | raptor2 | 0 | No fix |
| Debian:13 | raptor2 | 0 | No fix |
| Debian:13 | raptor2 | 0 | 2.0.16-6 |
| Debian:14 | raptor2 | 0 | 2.0.16-6 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 | raptor | 0 | 2.0.15-150200.9.18.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 | raptor | 0 | 2.0.15-150200.9.18.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | raptor | 0 | 2.0.15-5.9.1 |
| Ubuntu:16.04:LTS | raptor2 | 0 | No fix |
| Ubuntu:18.04:LTS | raptor2 | 0 | No fix |
| Ubuntu:20.04:LTS | raptor2 | 0 | No fix |
| Ubuntu:20.04:LTS | raptor2 | 0 | 2.0.15-0ubuntu1.20.04.2 |
| Ubuntu:22.04:LTS | raptor2 | 0 | No fix |
| Ubuntu:22.04:LTS | raptor2 | 0 | 2.0.15-0ubuntu4.1 |
| Ubuntu:24.04:LTS | raptor2 | 0 | No fix |
| Ubuntu:24.04:LTS | raptor2 | 0 | 2.0.16-3ubuntu0.1 |
| Ubuntu:24.10 | raptor2 | 0 | No fix |
| Ubuntu:25.04 | raptor2 | 0 | 2.0.16-4ubuntu1 |
| Ubuntu:25.10 | raptor2 | 0 | 2.0.16-4ubuntu1 |
| Ubuntu:Pro:16.04:LTS | raptor2 | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | raptor2 | 0 | 2.0.14-1ubuntu0.16.04.1+esm1 |
| Ubuntu:Pro:18.04:LTS | raptor2 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | raptor2 | 0 | 2.0.14-1ubuntu0.18.04.1+esm1 |
| openSUSE:Leap 15.6 | raptor | 0 | 2.0.15-150200.9.18.1 |
| openSUSE:Tumbleweed | raptor | 0 | 2.0.16-5.1 |