4

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2024-57822

CVE-2024-57822: In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing...

In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal().

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2024-57822

CVE-2024-57822:

4

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability description directly names 'raptor_ntriples_parse_term_internal()' as the site of the heap-based buffer over-read. This is corroborated by the ASAN trace provided in the linked GitHub issue #70, which shows a crash (heap-buffer-overflow) within this function during the parsing of nquads. Although specific commit patches were not retrieved, the diagnostic information from the issue report is strong evidence pointing to this function as the vulnerable one. The other functions in the call stack are callers of the vulnerable function but the vulnerability itself resides in 'raptor_ntriples_parse_term_internal'. The confidence is high due to the direct mention in the vulnerability description and the ASAN trace from the issue report which is a reliable source of information for runtime errors and crashes, pinpointing the exact location of the memory safety violation. The file path is also derived from the ASAN trace. No specific patch was analyzed, but the evidence from the issue is sufficient to identify the vulnerable function with high confidence based on the provided guidelines (point 4: 'in a case where commit info is not available, you can use the additional descriptions to identify the vulnerable functions but only if tries to fetch and failed').

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.