PatchTheCVElibrdf vulnerabilities
Recent CVEs affecting librdf products. 2 tracked.
librdf has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-01-10. Highest priority: CVE-2024-57823 (score 45/100).
- CVE-2024-57823 CRITICAL 9.3 UPGRADE In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the tur
- CVE-2024-57822 MEDIUM 4.0 UPGRADE In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with
FAQ
How do I fix librdf vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is librdf being exploited right now?
None of the tracked librdf CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which librdf CVE should I patch first?
CVE-2024-57823 currently ranks highest (45/100): In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the tur.