CVE-2024-27507 — Missing Release of Memory after Effective Lifetime in Liblas

CWE-401 — Missing Release of Memory after Effective Lifetime5 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 68.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Fedoraproject FedoraLiblas
Timeline
PublishedFeb 27

Description

libLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDliblas/liblas1.8.1

Also affects: Fedora 38, 39, 40

🔴Vulnerability Details

3
CVEList
CVE-2024-27507: libLAS 1↗2024-02-27
▶
OSV
CVE-2024-27507: libLAS 1↗2024-02-27
▶
GHSA
GHSA-qjgm-wr4w-h2g9: libLAS 1↗2024-02-27
▶

📋Vendor Advisories

1
Red Hat
liblas: memory leak may lead to DoS↗2024-02-27
▶
CVE-2024-27507 — Liblas vulnerability | cvebase