gdal/gtiff_mmap: Crash in _TIFFmemcpy

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5716916687077376 Project: gdal Fuzzer: aflgdalgtiffmmap Fuzz target binary: gtiffmmap Job Type: aflasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x621000033e07 Crash State: TIFFmemc...

gdal/gtiff_mmap: Crash in LogL16Decode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5636224519241728 Project: gdal Fuzzer: libFuzzergdalgtiffmmap Fuzz target binary: gtiffmmap Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x621001003d08 Crash...

gdal/gtiff_mmap: Crash in DumpModeDecode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5685287126040576 Project: gdal Fuzzer: libFuzzergdalgtiffmmap Fuzz target binary: gtiffmmap Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000109320bef Crash...

gdal/gdal_translate_fuzzer: Heap-buffer-overflow in GTiffRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5764371029950464 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

gdal/mrf_fuzzer: Heap-buffer-overflow in ExpandPacked8ToByte1

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5645695916179456 Project: gdal Fuzzer: aflgdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f4b21b43800 Crash...

Fedora Update for gdal FEDORA-2018-3119a06646

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gdal/ogr_fuzzer: Heap-buffer-overflow in OGRPDS::OGRPDSLayer::GetNextRawFeature

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5736429633667072 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

gdal/srp_fuzzer: Heap-use-after-free in Curl_llist_remove

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5145526598631424 Project: gdal Fuzzer: aflgdalsrpfuzzer Fuzz target binary: srpfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61b0000012e0 Crash...

EulerOS Virtualization 2.5.3 : sqlite (EulerOS-SA-2019-1275)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - osunix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to...

gdal/gdal_filesystem_fuzzer: Bad-cast to GDALDatasetVRTSimpleSource::XMLInit in VRTParseCoreSources

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5642971371798528 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address:...

gdal/gdal_fuzzer: Heap-use-after-free in GDALDataset::Reference

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5764663096115200 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6160000060...

gdal/gdal_vector_translate_fuzzer: Heap-use-after-free in VSIFCloseL

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5767757281361920 Project: gdal Fuzzer: aflgdalvectortranslatefuzzer Fuzz target binary: gdalvectortranslatefuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in CSLTokenizeString2

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5709319226523648 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Fedora 29 : gdal (2018-3119a06646)

https://trac.osgeo.org/gdal/wiki/Release/2.3.2-News Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : mingw-gdal / mingw-xerces-c (2018-7b97e553ff)

Update to 3.2.1 CVE-2017-12627 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

gdal/gdal_translate_fuzzer: Heap-buffer-overflow in VSIMemHandle::Read

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5757307697233920 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

Updated gdal packages fix security vulnerabilities

A flaw was found in gdal up to version 2.3.0. A Heap-buffer-overflow in GTiffOddBitsBand::IReadBlock. A flaw was found in gdal. A Heap-buffer-overflow in NITFRasterBand::Unpack. A flaw was found in gdal up to version 2.3.0. An Index-out-of-bounds in CPLErrorSetState...

MGASA-2018-0451 Updated gdal packages fix security vulnerabilities

A flaw was found in gdal up to version 2.3.0. A Heap-buffer-overflow in GTiffOddBitsBand::IReadBlock. A flaw was found in gdal. A Heap-buffer-overflow in NITFRasterBand::Unpack. A flaw was found in gdal up to version 2.3.0. An Index-out-of-bounds in CPLErrorSetState...

[SECURITY] Fedora 29 Update: gdal-2.3.2-1.fc29

Geospatial Data Abstraction Library GDAL/OGR is a cross platform C++ translator library for raster and vector geospatial data formats. As a library, it presents a single abstract data model to the calling application for all supported formats. It also comes with a variety of useful commandline...

gdal/gtiff_fuzzer: Crash in GDAL_LercNS::Lerc2::ReadHeader

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5741391389392896 Project: gdal Fuzzer: aflgdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618f800006ff Crash State:...