CVE-2019-1010060

2019-07-1613:15:11

CWE-119

web.nvd.nist.gov

nasa

cfitsio

buffer overflow

cve-2019-1010060

arbitrary code execution

remote attack vector

8.5 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.1%

CPENameOperatorVersion
nasa:cfitsionasa cfitsiolt3.43

CPE	Name	Operator	Version
nasa:cfitsio	nasa cfitsio	lt	3.43

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=892458

github.com/astropy/astropy/pull/7274

heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3420.tar.gz

heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3430.tar.gz

heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes2.txt