NASA CFITSIO Buffer Overflow Vulnerability

NASA CFITSIO is a FITS file subroutine library that is primarily used to read and write data files in the FITS Flexible Image Transfer System format. A buffer overflow vulnerability exists in NASA CFITSIO versions prior to 3.43. The vulnerability stems from a networked system or product performin...

AZL-43912 CVE-2019-1010060 affecting package cfitsio 4.0.0-5

NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were changed. The attack vector is: remote unauthenticated attacker. The fixed version is: 3.43. NOTE: this CVE refers to the issues not covered by...

Fedora Update for cfitsio FEDORA-2019-3c1aed2aa9

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 28 Update: cfitsio-3.430-2.fc28

CFITSIO is a library of C and FORTRAN subroutines for reading and writing data files in FITS Flexible Image Transport System data format. CFITSIO simplifies the task of writing software that deals with FITS files by providing an easy to use set of high-level routines that insulate the programmer...

Multiple Buffer Overflow Vulnerabilities in CFITSIO

CFITSIO library is a C library for reading and writing data files in FITS Flexible Image Transfer System data format. Multiple buffer overflow vulnerabilities exist in the image parsing functionality in CFITSIO library version 3.42. An attacker can exploit this vulnerability by sending a speciall...

DEBIAN-CVE-2018-3847

Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this...

PT-2018-16241 · Nasa · Cfitsio

Name of the Vulnerable Software and Affected Versions: CFITSIO library version 3.42 Description: Multiple exploitable buffer overflow vulnerabilities exist in the image parsing functionality. Specially crafted images parsed via the library can cause a stack-based buffer overflow, overwriting...

NASA CFITSIO 'ffghbn' Function Heap Buffer Overflow Vulnerability

NASA CFITSIO is a FITS file subroutine library for reading and writing data files in FITS Flexible Image Transfer System format. A heap buffer overflow vulnerability exists in the 'ffghbn' function in NASA CFITSIO version 3.42. An attacker could exploit this vulnerability by sending a FIT image t...

NASA CFITSIO 'ffghtb' function heap buffer overflow vulnerability

NASA CFITSIO is a FITS file subroutine library for reading and writing data files in FITS Flexible Image Transfer System format. A heap buffer overflow vulnerability exists in the 'ffghtb' function in NASA CFITSIO version 3.42. An attacker could exploit this vulnerability by sending a FIT image t...

NASA CFITSIO 'ffgphd' and 'ffgtkn' function stack buffer overflow vulnerability

NASA CFITSIO is a FITS file subroutine library for reading and writing data files in FITS Flexible Image Transfer System format. A stack buffer overflow vulnerability exists in the 'ffgphd' and 'ffgtkn' functions in NASA CFITSIO version 3.42. An attacker could exploit this vulnerability by sendin...

DEBIAN-CVE-2018-3848

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution...

DEBIAN-CVE-2018-3846

In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution...

UBUNTU-CVE-2018-3846

In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution...

UBUNTU-CVE-2018-3849

In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution...

DEBIAN-CVE-2018-3849

In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution...

Vulnerability Spotlight: TALOS-2018-0529-531 - Multiple Vulnerabilities in NASA CFITSIO library

Vulnerabilities discovered by Tyler Bohan from Talos Overview Talos is disclosing three remote code execution vulnerabilities in the NASA CFITSIO library. CFITSIO is a library of C and Fortran subroutines for reading and writing data files in the Flexible Image Transport System FITS data format...

NASA CFITSIO `ffgkyn` Stack Overflow Code Execution Vulnerability

Summary Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigg...

NASA CFITSIO `ffghbn` and `ffghtb` Stack Overflow Code Execution Vulnerabilities

Summary Exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this...

NASA CFITSIO Multiple Stack Overflow Code Execution Vulnerabilities

Summary Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigg...

[SECURITY] Fedora 28 Update: cfitsio-3.430-1.fc28

CFITSIO is a library of C and FORTRAN subroutines for reading and writing data files in FITS Flexible Image Transport System data format. CFITSIO simplifies the task of writing software that deals with FITS files by providing an easy to use set of high-level routines that insulate the programmer...