CVE-2009-0839 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mapserver

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer12 documents6 sources

Severity

10.0CRITICALNVD

EPSS

8.3%

top 7.70%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Osgeo Mapserver Debian Mapserver UMN Mapserver

Timeline

PublishedMar 31

Latest updateMay 2

Description

Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

▶debiandebian/mapserver< mapserver 5.2.2-1 (bookworm)

▶Debianosgeo/mapserver< 5.2.2-1+3

▶NVDumn/mapserver4.0

▶NVDosgeo/mapserver11 versions+10

🔴Vulnerability Details

GHSA

GHSA-9r5g-wj95-f57q: Stack-based buffer overflow in mapserv↗2022-05-02

▶

OSV

CVE-2009-0839: Stack-based buffer overflow in mapserv↗2009-03-31

▶

📋Vendor Advisories

Debian

CVE-2009-0839: mapserver - Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10...↗2009

▶

Red Hat

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗

▶

Red Hat

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗

▶

Red Hat

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗

▶

Red Hat

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗

▶

💬Community

Bugzilla

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗2009-04-01

▶