781 matches found
[SECURITY] [DLA 2877-1] gdal security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2877-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 12, 2022 https://wiki.debian.org/LTS -...
Debian DLA-2877-1 : gdal - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2877 advisory. - GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded. CVE-2019-17545 - GDAL 3.3.0 through...
DLA-2877-1 gdal - security update
Bulletin has no description...
CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
Heap overflow
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
Out-of-bounds Write
GDAL has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
CVE-2021-45943: Out-of-bounds Write
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
CVE-2021-45943
GDAL 3.3.0–3.4.0 contains a heap-based buffer overflow in PCIDSKFile::ReadFromFile (invoked via PCIDSKSegment::ReadFromFile and PCIDSKBinarySegment::CPCIDSKBinarySegment). This can cause denial of service and may permit arbitrary code execution when processing crafted PCIDSK data. Public advisori...
gdal:mitab_tab_fuzzer: Heap-buffer-overflow in PCIDSK::CPCIDSKFile::ReadFromFile
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4585687595220992 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: mitabtabfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7fe6a0ff8201...
PT-2021-7494 · Gdal +1 · Gdal +1
Name of the Vulnerable Software and Affected Versions: GDAL versions 3.3.0 through 3.4.0 Description: The issue is related to a heap-based buffer overflow in the PCIDSK::CPCIDSKFile::ReadFromFile function, which can be exploited by a remote attacker to cause a denial of service. This function is...
gdal:gdal_filesystem_fuzzer: Heap-buffer-overflow in GRIBRasterBand::IReadBlock
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6173546601119744 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...
gdal:gdal_filesystem_fuzzer: Heap-buffer-overflow in GRIBRasterBand::IReadBlock
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6667229731618816 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...
gdal:gml_geom_import_fuzzer: Heap-double-free in Curl_close
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4538384865951744 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gmlgeomimportfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x617000047580 Crash...