[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2018-3849 -- cfitsio

ID: oval:org.secpod.oval:def:2000531Date: (C)2019-04-22   (M)2023-11-13
Class: VULNERABILITYFamily: unix




In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

Platform:
Debian 8.x
Debian 9.x
Product:
libcfitsio-dev
Reference:
CVE-2018-3849
CVE    1
CVE-2018-3849
CPE    3
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x
cpe:/a:gsfc:libcfitsio-dev

© SecPod Technologies