PT-2018-19290 · Osgeo · Gdal

Publicado 2018-11-15 · Atualizado 2018-11-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions gdal versions up to 2.3.0

Description A flaw was found in gdal, involving a Heap-buffer-overflow in GTiffOddBitsBand::IReadBlock and NITFRasterBand::Unpack, as well as an Index-out-of-bounds in CPLErrorSetState.

Recommendations For versions up to 2.3.0, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2018-0451

Produtos afetados

Gdal

Referências · 4

• https://advisories.mageia.org/MGASA-2018-0451.html · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/F7UTCHIMQ32VOARS5O67QMCVHTYAPTMM · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=23824 · Nota
• https://osv.dev/vulnerability/MGASA-2018-0451 · Aviso do Fabricante