QwikSec

Security Database

CVE

CWE

Training

CVE-2017-5522

Published: Mar 15, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/mapserver/mapserver/commit/e52a436c0e1c5e9f7ef13428dba83194a800f4df

x_refsource_CONFIRM

http://www.mapserver.org/development/changelog/changelog-6-4.html#changelog-6-4-5

x_refsource_CONFIRM

http://www.mapserver.org/development/changelog/changelog-6-0-6.html#changelog-6-0-6

x_refsource_CONFIRM

[mapserver-dev] 20170118 MapServer 6.0.6, 6.2.4, 6.4.5 and 7.0.4 are released

mailing-list

x_refsource_MLIST

http://www.mapserver.org/development/changelog/changelog-7-0.html#changelog-7-0-4

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

http://www.mapserver.org/development/changelog/changelog-6-2-4.html#changelog-6-2-4

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.