Back to search
CVE-2019-1010060
Published: Jul 16, 2019
Modified: Aug 5, 2024
PUBLISHED
Description
NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were changed. The attack vector is: remote unauthenticated attacker. The fixed version is: 3.43. NOTE: this CVE refers to the issues not covered by CVE-2018-3846, CVE-2018-3847, CVE-2018-3848, and CVE-2018-3849. One example is ftp_status in drvrnet.c mishandling a long string beginning with a '4' character.
| Vendor | Product | Versions |
|---|---|---|
NASA | CFITSIO | affected < 3.43 [fixed: 3.43] |
References
https://github.com/astropy/astropy/pull/7274
x_refsource_MISC
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892458
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now