Lucene search
+L

87 matches found

Talos Blog
Talos Blog
added 2018/04/12 12:10 p.m.58 views

Vulnerability Spotlight: TALOS-2018-0529-531 - Multiple Vulnerabilities in NASA CFITSIO library

Vulnerabilities discovered by Tyler Bohan from Talos Overview Talos is disclosing three remote code execution vulnerabilities in the NASA CFITSIO library. CFITSIO is a library of C and Fortran subroutines for reading and writing data files in the Flexible Image Transport System FITS data format...

6.8CVSS1.5AI score0.04034EPSS
Exploits4
Talos
Talos
added 2018/04/12 12:0 a.m.36 views

NASA CFITSIO `ffgkyn` Stack Overflow Code Execution Vulnerability

Summary Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigg...

8.8CVSS8.9AI score0.02842EPSS
Exploits1
Talos
Talos
added 2018/04/12 12:0 a.m.38 views

NASA CFITSIO Multiple Stack Overflow Code Execution Vulnerabilities

Summary Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigg...

8.8CVSS8.9AI score0.03074EPSS
Exploits1
OSV
OSV
added 2018/04/06 10:54 p.m.2 views

MGASA-2018-0197 Updated cfitsio packages fix security vulnerabilities

Updated cfitsio packages fix security vulnerabilities that could allow a remote, unauthenticated attacker to take control of a server running the CFITSIO software. These vulnerabilities affect all servers and products running the CFITSIO software...

7.6AI score
Exploits0References4
Mageia
Mageia
added 2018/04/06 10:54 p.m.17 views

Updated cfitsio packages fix security vulnerabilities

Updated cfitsio packages fix security vulnerabilities that could allow a remote, unauthenticated attacker to take control of a server running the CFITSIO software. These vulnerabilities affect all servers and products running the CFITSIO software...

5.8AI score
Exploits0References3
Fedora
Fedora
added 2018/03/30 1:31 p.m.18 views

[SECURITY] Fedora 28 Update: mingw-cfitsio-3.430-1.fc28

MinGW Windows CFITSIO library...

2.6AI score
Exploits0
Fedora
Fedora
added 2018/03/30 1:31 p.m.13 views

[SECURITY] Fedora 28 Update: cfitsio-3.430-1.fc28

CFITSIO is a library of C and FORTRAN subroutines for reading and writing data files in FITS Flexible Image Transport System data format. CFITSIO simplifies the task of writing software that deals with FITS files by providing an easy to use set of high-level routines that insulate the programmer...

1.4AI score
Exploits0
Rows per page
Query Builder