CVE-2009-1177 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mapserver

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer12 documents6 sources

Severity

10.0CRITICALNVD

EPSS

1.5%

top 18.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Osgeo Mapserver Debian Mapserver UMN Mapserver

Timeline

PublishedMar 31

Latest updateMay 2

Description

Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

▶debiandebian/mapserver< mapserver 5.2.2-1 (bookworm)

▶Debianosgeo/mapserver< 5.2.2-1+3

▶NVDumn/mapserver4.0

▶NVDosgeo/mapserver11 versions+10

Patches

Patch: lists.osgeo.org ↗Patch: lists.osgeo.org ↗

🔴Vulnerability Details

GHSA

GHSA-5xfw-28hr-882v: Multiple stack-based buffer overflows in maptemplate↗2022-05-02

▶

OSV

CVE-2009-1177: Multiple stack-based buffer overflows in maptemplate↗2009-03-31

▶

📋Vendor Advisories

Debian

CVE-2009-1177: mapserver - Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4...↗2009

▶

Red Hat

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗

▶

Red Hat

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗

▶

Red Hat

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗

▶

Red Hat

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗

▶

💬Community

Bugzilla

mapserver: multiple security fixes in 5.2.2 and 4.10.4 (CVE-2009-0839, CVE-2009-0840, CVE-2009-0841, CVE-2009-0842, CVE-2009-0843, CVE-2009-1176, CVE-2009-1177)↗2009-04-01

▶