Segmentation Fault in LibLAS 1.8.1 Affects Denial of Service Processes
CVE-2018-20539

6.5MEDIUM

Key Information:

Vendor: Liblas
Status: Liblas
Vendor: CVE Published:; 28 December 2018

🔔 Create Liblas Vulnerability Alert

What is CVE-2018-20539?

A segmentation fault occurs in LibLAS version 1.8.1 due to illegal address access in the liblas::SpatialReference::GetGTIF() function. This vulnerability may lead to denial of service, disrupting the normal operation of affected applications reliant on this library.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1652609

x_refsource_MISC

https://lists.fedoraproject.org/archives/list/package-ann...

vendor-advisoryx_refsource_FEDORA

https://lists.fedoraproject.org/archives/list/package-ann...

vendor-advisoryx_refsource_FEDORA

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 28, 2018
Vulnerability Reserved
Dec 27, 2018

CVE-2018-20539 Data

.