OSGeo GDAL 2.4.2

CPE Details

OSGeo GDAL 2.4.2
osgeo
gdal
2.4.2
2019-10-28
15h23 +00:00
2019-10-28
15h23 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:osgeo:gdal:2.4.2:*:*:*:*:*:*:*

Informations

Vendor

osgeo

Product

gdal

Version

2.4.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-25050 2021-07-20 04h46 +00:00 netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and netCDFDataset::~netCDFDataset).
7.8
High
CVE-2019-17545 2019-10-13 23h07 +00:00 GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.
9.8
Critical
CVE-2019-17546 2019-10-13 23h07 +00:00 tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.
8.8
High