CVE-2019-1010060

CVE-2019-1010060 affects NASA CFITSIO before 3.43. A buffer overflow in the library (example: ftp_status in drvrnet.c) can be triggered by a long string, with over 40 source files changed in the update. The attack is remote and unauthenticated, and the impact is arbitrary code execution. The fixe...

CVE-2018-3849

CFITSIO 3.42 contains a stack-based buffer overflow in ffghtb() that can be triggered by a crafted FIT image, potentially allowing remote code execution. The connected notes indicate this CVE (CVE-2018-3849) is discussed in unpatched advisories for some Linux distributions (e.g., Red Hat/UNPATCHE...

CVE-2018-3846

NASA CFITSIO 3.42 is affected by CVE-2018-3846, where the ffgphd and ffgtkn functions can be triggered by specially crafted FIT images, causing a stack-based buffer overflow and potentially allowing arbitrary code execution. The vulnerability is described in Nessus/NVD entries as exploitable via ...

CVE-2018-3848

CVE-2018-3848 affects NASA CFITSIO before 3.43 (CFITSIO 3.42 in the report). The vulnerability is a stack-based buffer overflow in the ffghbn function that can be triggered by specially crafted FITS images parsed by the library, potentially leading to arbitrary code execution. The initial documen...

CVE-2018-3847

CVE-2018-3847 affects CFITSIO library 3.42. The vulnerability is a stack-based buffer overflow in the image parsing functionality, triggered by specially crafted FIT images. An attacker could deliver a FIT image to cause arbitrary code execution. Public details in the connected Nessus entry indic...