CVE-2017-5522

high-risk
Published 2017-03-15

Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests.

Do I need to act?

~
6.0% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: e52a436c0e1c5e9f7ef13428dba83194a800f4df
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (20)

Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver
Mapserver

Affected Vendors

Osgeo Debian

References (14)

Third Party Advisory http://www.debian.org/security/2017/dsa-3766
Release Notes http://www.mapserver.org/development/changelog/changelog-6-0-6.html#changelog-6-...
Release Notes http://www.mapserver.org/development/changelog/changelog-6-2-4.html#changelog-6-...
Release Notes http://www.mapserver.org/development/changelog/changelog-6-4.html#changelog-6-4-...
Release Notes http://www.mapserver.org/development/changelog/changelog-7-0.html#changelog-7-0-...
Patch https://github.com/mapserver/mapserver/commit/e52a436c0e1c5e9f7ef13428dba83194a8...
Mailing List https://lists.osgeo.org/pipermail/mapserver-dev/2017-January/015007.html
Third Party Advisory http://www.debian.org/security/2017/dsa-3766
Release Notes http://www.mapserver.org/development/changelog/changelog-6-0-6.html#changelog-6-...
Release Notes http://www.mapserver.org/development/changelog/changelog-6-2-4.html#changelog-6-...
Release Notes http://www.mapserver.org/development/changelog/changelog-6-4.html#changelog-6-4-...
Release Notes http://www.mapserver.org/development/changelog/changelog-7-0.html#changelog-7-0-...
Patch https://github.com/mapserver/mapserver/commit/e52a436c0e1c5e9f7ef13428dba83194a8...
Mailing List https://lists.osgeo.org/pipermail/mapserver-dev/2017-January/015007.html
62
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 9/34 · Low
Exposure 21/34 · High