PT-2018-19290 · Osgeo · Gdal

Published 2018-11-15 · Updated 2018-11-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions gdal versions up to 2.3.0

Description A flaw was found in gdal, involving a Heap-buffer-overflow in GTiffOddBitsBand::IReadBlock and NITFRasterBand::Unpack, as well as an Index-out-of-bounds in CPLErrorSetState.

Recommendations For versions up to 2.3.0, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2018-0451

Affected Products

Gdal

References · 4

• https://advisories.mageia.org/MGASA-2018-0451.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/F7UTCHIMQ32VOARS5O67QMCVHTYAPTMM · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0451 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=23824 · Note