PT-2018-19290

Name of the Vulnerable Software and Affected Versions gdal versions up to 2.3.0 Description A flaw was found in gdal, involving a Heap-buffer-overflow in GTiffOddBitsBand::IReadBlock and NITFRasterBand::Unpack, as well as an Index-out-of-bounds in CPLErrorSetState. Recommendations For versions up...

[SECURITY] Fedora 29 Update: gdal-2.3.2-1.fc29

Geospatial Data Abstraction Library GDAL/OGR is a cross platform C++ translator library for raster and vector geospatial data formats. As a library, it presents a single abstract data model to the calling application for all supported formats. It also comes with a variety of useful commandline...

gdal/gtiff_fuzzer: Crash in GDAL_LercNS::Lerc2::ReadHeader

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5741391389392896 Project: gdal Fuzzer: aflgdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618f800006ff Crash State:...

gdal/gtiff_fuzzer: Heap-buffer-overflow in TWebPDecode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5728607687671808 Project: gdal Fuzzer: libFuzzergdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

gdal/gdal_fuzzer: Crash in sqlite3VdbeExec

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5755023447818240 Project: gdal Fuzzer: aflgdalfuzzer Fuzz target binary: gdalfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fe205898bdf Crash State:...

gdal/ogr_filesystem_fuzzer: Heap-buffer-overflow in curl_url_get

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5658849185366016 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

gdal/ogr_filesystem_fuzzer: Heap-buffer-overflow in OGRWFSLayer::GetRequiredOutputFormat

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6300422296829952 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Cras...

gdal/gdal_translate_fuzzer: Heap-buffer-overflow in GDALResampleChunk32R_Gauss

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6302520631623680 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

Fedora Update for mingw-gdal FEDORA-2018-7b97e553ff

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: mingw-gdal-2.2.4-5.fc28

MinGW Windows GDAL library...

gdal/gdal_fuzzer: Heap-buffer-overflow in void GDALUnrolledCopyGeneric<unsigned char, 1, 3>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5679329223639040 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

gdal/gdal_fuzzer: Heap-buffer-overflow in VSIMemHandle::Read

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5411373956726784 Project: gdal Fuzzer: aflgdalfuzzer Fuzz target binary: gdalfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x6130000022c4 Crash...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in VSIUnixStdioHandle::Read

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6701586108645376 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

gdal/gdal_fuzzer: Crash in void GDALFastCopy<unsigned char>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5598766517190656 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f43b3589ffe Crash Stat...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in ycc_rgb_convert

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5359746084241408 Project: gdal Fuzzer: aflgdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in NITFUncompressVQTile

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5178658988752896 Project: gdal Fuzzer: aflgdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

gdal/mrf_fuzzer: Heap-buffer-overflow in GDAL_LercNS::Lerc2::ComputeChecksumFletcher32

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5450985903226880 Project: gdal Fuzzer: aflgdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000000761 Crash...

gdal/ers_fuzzer: Bad-cast to GDALPamRasterBand from (anonymous namespace)::ERSProxyRasterBand in GDALPamRasterBand* cpl::down_cast<GDALPamRasterBand*, GDALRasterBand>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5108048535224320 Project: gdal Fuzzer: libFuzzergdalersfuzzer Fuzz target binary: ersfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000959f0a0 Crash State:...

gdal/gdal_translate_fuzzer: Crash in GDAL_LercNS::BitStuffer2::Decode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5068982888431616 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

gdal/gtiff_fuzzer: Crash in GDAL_LercNS::BitStuffer2::BitUnStuff

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5681668563140608 Project: gdal Fuzzer: libFuzzergdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0003fffffffc Cra...