gdal:gmlas_fuzzer: Crash in xercesc_4_0::DFAContentModel::cleanup

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5557395103547392 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlasfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xe65fc000 Crash State:...

DLA-3129-1 gdal - security update

Bulletin has no description...

Debian: Security Advisory (DLA-3129-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3129-1] gdal security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3129-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 01, 2022 https://wiki.debian.org/LTS -...

Debian dla-3129 : gdal-bin - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3129 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3129-1 [email protected]...

Debian: Security Advisory (DSA-5239-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5239-1 : gdal - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5239 advisory. A heap-based buffer overflow vulnerability was discovered in gdal, a Geospatial Data Abstraction Library, which could result in denial of service or potentially the...

[SECURITY] [DSA 5239-1] gdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5239-1 [email protected] https://www.debian.org/security/ Aron Xu September 27, 2022 https://www.debian.org/security/faq -...

DSA-5239-1 gdal - security update

Bulletin has no description...

gdal:cad_fuzzer: Heap-buffer-overflow in CADVector::CADVector

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4608255288016896 Project: gdal Fuzzing Engine: afl Fuzz Target: cadfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x610000006408 Crash State:...

gdal:zarr_fuzzer: Crash in CPLStrdup

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6554814057676800 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: zarrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000fc00 Crash State: CPLStrd...

AZL-43462 CVE-2020-35538 affecting package gdal 3.6.3-5

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

AZL-44676 CVE-2020-35538 affecting package gdal 3.6.3-2

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

AZL-44121 CVE-2022-37434 affecting package gdal 3.6.3-2

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

gdal:gdal_translate_fuzzer: Crash in GDALRasterBand::GetHistogram

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5801425921245184 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdaltranslatefuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffc079434e0 Crash...

gdal:mrf_fuzzer: Heap-buffer-overflow in GDALDeinterleave

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5376275564331008 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mrffuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf6109088 Crash...

gdal:gdal_fuzzer: Heap-double-free in VSIFree

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5992825266765824 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gdalfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x618000005480 Crash State:...

gdal:gdal_vector_translate_fuzzer: Heap-use-after-free in OGRCSVDataSource::OpenTable

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5954994685214720 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalvectortranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS

Summary IBM Netezza Analytics for NPS uses gdal version 1.7.2. IBM Netezza Analytics for NPS has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2011-3045 DESCRIPTION: libpng is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the pnginflate...

gdal:gdal_translate_fuzzer: Segv on unknown address in ComputeStatisticsInternal<unsigned char, false>::f

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5407815616823296 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...