EUVD-2022-0111

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-45943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and...

BIT-GDAL-2021-45943

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

GDAL: Heap Buffer Overflow

Background GDAL is a geospatial data abstraction library. Description GDAL does not sufficiently sanitize input when loading PCIDSK binary segments. Impact Loading crafted PCIDSK data via GDAL could result in denial of service. Workaround There is no known workaround at this time. Resolution All...

[SECURITY] [DSA 5239-1] gdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5239-1 [email protected] https://www.debian.org/security/ Aron Xu September 27, 2022 https://www.debian.org/security/faq -...

Updated gdal packages fix security vulnerability

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment. CVE-2021-45943...

MGASA-2022-0137 Updated gdal packages fix security vulnerability

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment. CVE-2021-45943...

DEBIAN-CVE-2021-45943

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

CVE-2021-45943

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

CVE-2021-45943

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

CVE-2021-45943

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

Heap overflow

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

Out-of-bounds Write

GDAL has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

GDAL 缓冲区错误漏洞

GDAL is an open source geospatial data abstraction library. A buffer error vulnerability exists in GDAL that stems from the product's PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment functions failing to correctly determine memory boundaries when calling...

CVE-2021-45943

GDAL 3.3.0–3.4.0 contains a heap-based buffer overflow in PCIDSKFile::ReadFromFile (invoked via PCIDSKSegment::ReadFromFile and PCIDSKBinarySegment::CPCIDSKBinarySegment). This can cause denial of service and may permit arbitrary code execution when processing crafted PCIDSK data. Public advisori...

CVE-2021-45943

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

CVE-2021-45943

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

OSV-2021-1651 Heap-buffer-overflow in PCIDSK::CPCIDSKFile::ReadFromFile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41993 Crash type: Heap-buffer-overflow WRITE Crash state: PCIDSK::CPCIDSKFile::ReadFromFile PCIDSK::CPCIDSKSegment::ReadFromFile PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

PT-2021-7494 · Gdal +1 · Gdal +1

Name of the Vulnerable Software and Affected Versions: GDAL versions 3.3.0 through 3.4.0 Description: The issue is related to a heap-based buffer overflow in the PCIDSK::CPCIDSKFile::ReadFromFile function, which can be exploited by a remote attacker to cause a denial of service. This function is...

gdal/gdal_fuzzer: Heap-buffer-overflow in PCIDSK::CPCIDSKGeoref::Load

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5443800485855232 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...